DescriptionSangfor Next-Gen Application Firewall version NGAF8.0.17 contains an authenticated file disclosure vulnerability that allows remote authenticated attackers to read arbitrary system files via the svpn_html/loadfile.php endpoint due to improper validation of the file parameter. Attackers can supply arbitrary file paths to the vulnerable endpoint, and when paired with an authentication bypass technique, can exploit this issue without authentication to disclose sensitive system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.