CVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803.

• CWE-200

• https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4Product
• https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/Exploit, Third Party Advisory
• https://vulncheck.com/advisories/sangfor-ngaf-auth-file-disclosureThird Party Advisory
• https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4Product
• https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/Exploit, Third Party Advisory
• https://vulncheck.com/advisories/sangfor-ngaf-auth-file-disclosureThird Party Advisory

Published

Oct 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30799MikroTik RouterOS stable before 6.49.7 and long-term through…7.2
• CVE-2023-3080The WP Mail Catcher plugin for WordPress is vulnerable to St…6.1
• CVE-2023-30800The web server used by MikroTik RouterOS version 6 is affect…7.5
• CVE-2023-30801All versions of the qBittorrent client through 4.5.5 use def…9.8
• CVE-2023-30802The Sangfor Next-Gen Application Firewall version NGAF8.0.17…5.3
• CVE-2023-30803The Sangfor Next-Gen Application Firewall version NGAF8.0.17…9.8
• CVE-2023-30805The Sangfor Next-Gen Application Firewall version NGAF8.0.17…9.8
• CVE-2023-30806The Sangfor Next-Gen Application Firewall version NGAF8.0.17…9.8
• CVE-2023-3081The WP Mail Logging plugin for WordPress is vulnerable to St…6.1
• CVE-2023-3082The Post SMTP plugin for WordPress is vulnerable to Stored C…6.1
• CVE-2023-3083Cross-site Scripting (XSS) - Stored in GitHub repository nil…8.7
• CVE-2023-30837Vyper is a pythonic smart contract language for the EVM. The…7.5