CVE-2025-46215

An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@fortinet.com

Published

2025-11-18

Last modified

2026-10-18

Weaknesses

CWE-653

Affected products

• Fortisandbox (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-501