Fortisandboxcloud (Fortinet) - vulnerabilities (CVEs)
9 CVEs, 1 in the last 30 days, 18 known versions, newest CVE from 2026-10-13. Vendor: Fortinet.
CVEs of Fortisandboxcloud
- CVE-2026-106172 - CVSS 5.3 (medium), 2026-10-13: A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all…
- CVE-2026-26084 - CVSS 9.9 (critical), 2026-09-08: A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through…
- CVE-2026-25089 - CVSS 9.8 (critical), 2026-06-09: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
- CVE-2026-26083 - CVSS 9.8 (critical), 2026-05-12: A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5,…
- CVE-2026-39813 - CVSS 9.8 (critical), 2026-04-14: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation…
- CVE-2026-25691 - CVSS 6.7 (medium), 2026-04-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox…
- CVE-2026-25836 - CVSS 7.2 (high), 2026-03-10: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox…
- CVE-2025-53679 - CVSS 7.2 (high), 2025-12-09: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox…
- CVE-2024-54026 - CVSS 8.8 (high), 2025-03-11: An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all…
