VULNERABILITY INTELLIGENCE

CVE-2026-14139

CVSS score4.2 MEDIUM

EPSS probability3.04%

CISA KEVNot currently listed

Published2026-06-30

Last modified2026-10-25

Description

A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of the argument port results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used.