Priority CRITICAL 85
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64974 · Published 2023-10-10 · No fix listed CWE-78
Priority CRITICAL 85
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64974 · Published 2023-10-10 · No fix listed CWE-78
Priority HIGH 82
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20887 · Published 2023-10-10 · No fix listed CWE-290
Priority HIGH 81
A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.06911 · Published 2026-01-09 · No fix listed CWE-77
Priority HIGH 81
A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0607 · Published 2026-01-09 · No fix listed CWE-77
Priority HIGH 79
A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.06984 · Published 2026-01-22 · No fix listed CWE-77
Priority HIGH 73
A vulnerability has been found in Sangfor Operation and Maintenance Management System up to 3.0.8.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.05721 · Published 2026-01-09 · No fix listed CWE-77
Priority HIGH 70
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02657 · Published 2026-08-03 · No fix listed CWE-77
Priority HIGH 70
A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.04284 · Published 2026-01-26 · No fix listed CWE-74
Priority HIGH 70
A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00568 · Published 2026-01-22 · No fix listed CWE-640
Priority HIGH 70
A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02036 · Published 2026-01-10 · No fix listed CWE-284
Priority HIGH 70
A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.06053 · Published 2026-01-10 · No fix listed CWE-77
Priority HIGH 67
A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical.
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.0034 · Published 2025-05-24 · No fix listed CWE-426
Priority MEDIUM 64
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.38947 · Published 2023-10-10 · No fix listed CWE-22
Priority MEDIUM 63
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00807 · Published 2023-10-10 · No fix listed CWE-540
Priority MEDIUM 57
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.04833 · Published 2026-01-26 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03043 · Published 2026-01-26 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.05063 · Published 2025-11-08 · Fixed in 3.0.11, 3.0.12 CWE-74
Priority MEDIUM 53
Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.
CVSS 3.1MEDIUM 4.3· Local · No auth · No interaction · EPSS 0.00169 · Published 2025-06-22 · No fix listed CWE-732
Priority LOW 25
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2022-02-26 · No fix listed CWE-522
THREATIST.IORead the docs