Security Advisory

CVE-2026-1414

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-26 02:02:06

Last updated 2026-02-23 08:55:31

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/get_Information of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

← Browse all CVEs View on cve.org ↗