Threats tagged 'ghsa-j2f8-96fc-682m'

CVE-2025-12916 is a command injection vulnerability in Sangfor Operation and Maintenance Security Management System 3.0 affecting the /fort/portal_login frontend component. The flaw arises from manipulation of the loginUrl argument, allowing remote attackers to execute arbitrary commands. Public exploit code has been disclosed. Upgrading to versions 3.0.11 or 3.0.12 is recommended to remediate the issue.