Fortisandbox Cloud (Fortinet) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-06-09. Vendor: Fortinet.
CVEs of Fortisandbox Cloud
- CVE-2026-25089 - CVSS 9.8 (critical), 2026-06-09: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
- CVE-2026-26083 - CVSS 9.8 (critical), 2026-05-12: A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5,…
- CVE-2026-39812 - CVSS 4.8 (medium), 2026-04-14: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
- CVE-2026-27316 - CVSS 2.7 (low), 2026-04-14: A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1…
- CVE-2026-25691 - CVSS 6.7 (medium), 2026-04-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox…
- CVE-2025-61886 - CVSS 5.4 (medium), 2026-04-14: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0…
- CVE-2026-25836 - CVSS 7.2 (high), 2026-03-10: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox…
- CVE-2025-53679 - CVSS 7.2 (high), 2025-12-09: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox…
- CVE-2024-54026 - CVSS 8.8 (high), 2025-03-11: An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all…
