CVE-2026-1413

A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of the argument port results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/LX-LX88/cve/issues/23Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.342802Permissions Required, VDB Entry
• https://vuldb.com/?id.342802Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.736522Third Party Advisory, VDB Entry

Published

Jan 26, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-14124Inappropriate implementation in CredentialProvider in Google…7.8
• CVE-2026-14125Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7…6.5
• CVE-2026-14126Incorrect security UI in UI in Google Chrome on Android prio…4.3
• CVE-2026-14127Inappropriate implementation in Printing in Google Chrome pr…4.3
• CVE-2026-14128Inappropriate implementation in Chrome for iOS in Google Chr…4.3
• CVE-2026-14129Inappropriate implementation in PreviewTab in Google Chrome …4.2
• CVE-2026-14130Incorrect security UI in Omnibox in Google Chrome prior to 1…4.3
• CVE-2026-14131Insufficient validation of untrusted input in WebAppInstalls…5.4
• CVE-2026-14132Inappropriate implementation in WebXR in Google Chrome prior…5.4
• CVE-2026-14133Race in History Embeddings in Google Chrome prior to 150.0.7…4.2
• CVE-2026-14134Inappropriate implementation in Autofill in Google Chrome on…4.3
• CVE-2026-14135Insufficient validation of untrusted input in Network in Goo…5.4