Fortisandboxpaas (Fortinet) - vulnerabilities (CVEs)
10 CVEs, 1 in the last 30 days, 34 known versions, newest CVE from 2026-10-26. Vendor: Fortinet.
CVEs of Fortisandboxpaas
- CVE-2026-107656 - CVSS 9.8 (critical), 2026-10-26: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…
- CVE-2026-26084 - CVSS 9.9 (critical), 2026-09-08: A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through…
- CVE-2026-25089 - CVSS 9.8 (critical), 2026-06-09: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
- CVE-2026-26083 - CVSS 9.8 (critical), 2026-05-12: A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5,…
- CVE-2026-39812 - CVSS 4.8 (medium), 2026-04-14: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…
- CVE-2026-39808 - CVSS 9.8 (critical), 2026-04-14: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may…
- CVE-2026-27316 - CVSS 2.7 (low), 2026-04-14: A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1…
- CVE-2026-25691 - CVSS 6.7 (medium), 2026-04-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox…
- CVE-2025-61886 - CVSS 5.4 (medium), 2026-04-14: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0…
- CVE-2026-25836 - CVSS 7.2 (high), 2026-03-10: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox…
