Fortinet FortiSandbox PaaS
10 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107656 | 5.0.0 – 5.0.6 ; 4.4.0 – 4.4.9 ; 4.2.1 – 4.2.8 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-26084 | 5.0.4 – 5.0.5 | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5 | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-25089 | 5.0.4 – 5.0.5 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th | CRITICAL 9.8 | 76 % | KEV | |
| CVE-2026-26083 | 23.4.4374 ; 23.4.4350 ; 23.3.4329 ; … | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2025-61886 | 5.0.0 – 5.0.4 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet For | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-39812 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-25691 | 5.0.4 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, | MEDIUM 6.7 | 0.5 % | ||
| CVE-2026-39808 | 23.4.4374 ; 23.4.4350 ; 23.3.4329 ; … | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th | CRITICAL 9.8 | 93 % | KEV | |
| CVE-2026-27316 | 23.4.4374 ; 23.4.4350 ; 23.3.4329 ; … | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandb | LOW 2.7 | 0.3 % | ||
| CVE-2026-25836 | 5.0.4 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5 | HIGH 7.2 | 1.8 % |