CVE-2025-12916 | Sangfor Operation and Maintenance Security Management System Frontend /fort/portal_login command injection

A vulnerability, which was classified as critical, has been found in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_login of the component Frontend. This manipulation of the argument loginUrl causes command injection.

This vulnerability appears as CVE-2025-12916. The attack may be initiated remotely. In addition, an exploit is available.

It is advisable to upgrade the affected component.