CVE-2024-54018

Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorized commands via crafted requests.

Score

CVSS 3.1 7.2 High

Status

Analyzed - psirt@fortinet.com

Published

2025-03-11

Last modified

2026-02-26

Weaknesses

CWE-78

Affected products

• Fortisandbox (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-110