CVE-2026-1412: Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection
A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1412?
CVE-2026-1412 is classified as a critical vulnerability due to the potential for command injection.
How do I fix CVE-2026-1412?
To mitigate CVE-2026-1412, update the Sangfor Operation and Maintenance Security Management System to version 3.0.13 or higher.
What systems are affected by CVE-2026-1412?
CVE-2026-1412 affects the Sangfor Operation and Maintenance Security Management System up to version 3.0.12.
What type of attack can CVE-2026-1412 lead to?
CVE-2026-1412 can lead to remote code execution via command injection through specifically crafted HTTP POST requests.
How can I identify if my system is vulnerable to CVE-2026-1412?
You can identify vulnerability to CVE-2026-1412 by checking if you're using Sangfor Operation and Maintenance Security Management System version 3.0.12 or earlier.