Sangfor Technologies vulnerabilities
We track 2 vulnerabilities in Sangfor Technologies products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Sangfor Technologies vulnerabilities
- 8.7 High severity
Sangfor Behavior Management System (DC…: Improper Restriction of XML External Entity Reference
Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafte
- 10.0 Critical severity
Endpoint Detection and Response Platform: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HT