Fortinet FortiSandbox
52 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107656 | 5.0.0 – 5.0.6 ; 4.4.0 – 4.4.9 ; 4.2.1 – 4.2.8 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-106172 | 5.2.0 – 5.2.1 ; 5.0.0 – 5.0.6 ; 4.4.0 – 4.4.10 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSan | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-106170 | 5.2.0 – 5.2.1 ; 5.0.0 – 5.0.6 ; 4.4.0 – 4.4.10 | An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, | MEDIUM 4.9 | 0.3 % | ||
| CVE-2026-26084 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5 | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-84387 | 5.2.0 ; 5.0.0 – 5.0.6 ; 4.4.0 – 4.4.9 ; … | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fort | HIGH 7.2 | 1.6 % | ||
| CVE-2026-59835 | 5.0.0 – 5.0.2 ; 4.4.3 – 4.4.8 | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allo | HIGH 8.6 | 0.4 % | ||
| CVE-2026-25089 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th | CRITICAL 9.8 | 76 % | KEV | |
| CVE-2026-26083 | 5.0.0 – 5.0.1 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-39813 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.8 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attack | CRITICAL 9.8 | 22 % | ||
| CVE-2025-61886 | 5.0.0 – 5.0.4 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet For | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-39812 | 5.0.0 – 5.0.4 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-25691 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, | MEDIUM 6.7 | 0.5 % | ||
| CVE-2026-39808 | 4.4.0 – 4.4.8 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th | CRITICAL 9.8 | 93 % | KEV | |
| CVE-2026-27316 | 5.0.0 – 5.0.5 ; 4.4.0 – 4.4.9 | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandb | LOW 2.7 | 0.3 % | ||
| CVE-2025-53608 | 5.0.0 – 5.0.2 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 ; … | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet For | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-52436 | 5.0.0 – 5.0.1 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 ; … | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet For | CRITICAL 9.6 | 7.3 % | ||
| CVE-2025-67685 | 5.0.0 – 5.0.4 ; 4.4.0 – 4.4.8 ; 4.2.1 – 4.2.8 ; … | A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 al | LOW 3.8 | 0.4 % | ||
| CVE-2025-53679 | 5.0.0 – 5.0.2 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 ; … | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin | HIGH 7.2 | 12 % | ||
| CVE-2025-54353 | 5.0.0 – 5.0.2 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 ; … | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet For | MEDIUM 6.1 | 6.3 % | ||
| CVE-2025-53949 | 5.0.0 – 5.0.2 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin | HIGH 8.8 | 17 % | ||
| CVE-2025-46215 | 5.0.0 – 5.0.1 ; 4.4.0 – 4.4.7 ; 4.2.1 – 4.2.8 ; … | An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 throu | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-27779 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4. | MEDIUM 6.7 | 0.6 % | ||
| CVE-2021-26105 | 3.2.2 ; 3.1.4 | A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below | HIGH 8.8 | 0.5 % | ||
| CVE-2024-54027 | 5.0.0 ; 4.4.0 – 4.4.6 ; 4.2.1 – 4.2.7 ; … | A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0. | HIGH 7.8 | 0.2 % | ||
| CVE-2024-54026 | 4.4.0 – 4.4.6 ; 4.2.1 – 4.2.8 ; 4.0.0 – 4.0.6 ; … | An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiS | HIGH 8.8 | 0.4 % | ||
| CVE-2024-54018 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a pr | HIGH 7.2 | 10 % | ||
| CVE-2024-52960 | 5.0.0 ; 4.4.0 – 4.4.6 ; 4.2.1 – 4.2.7 ; … | A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and be | HIGH 8.8 | 0.3 % | ||
| CVE-2024-52961 | 5.0.0 ; 4.4.0 – 4.4.6 ; 4.2.1 – 4.2.7 ; … | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, Fo | HIGH 8.8 | 0.5 % | ||
| CVE-2024-45328 | 4.4.0 – 4.4.6 | An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute | HIGH 7.8 | 0.1 % | ||
| CVE-2024-27781 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.4 ; … | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | CRITICAL 9.0 | 28 % | ||
| CVE-2024-27778 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.4 ; … | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 4.4.0 thr | HIGH 8.8 | 0.6 % | ||
| CVE-2024-31490 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-31491 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 | A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2 | HIGH 8.8 | 0.8 % | ||
| CVE-2024-21755 | 4.4.0 – 4.4.3 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.4 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th | HIGH 8.8 | 2.5 % | ||
| CVE-2024-21756 | 4.4.0 – 4.4.3 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.4 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th | HIGH 8.8 | 2.2 % | ||
| CVE-2023-47540 | 4.4.0 – 4.4.2 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 t | MEDIUM 6.7 | 0.6 % | ||
| CVE-2024-31487 | 4.4.0 – 4.4.4 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-23671 | 4.4.0 – 4.4.3 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.4 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, | HIGH 8.1 | 1.2 % | ||
| CVE-2023-47541 | 4.4.0 – 4.4.2 ; 4.2.1 – 4.2.6 ; 4.0.0 – 4.0.6 ; … | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2 | MEDIUM 6.7 | 0.3 % | ||
| CVE-2023-41844 | 4.4.0 – 4.4.2 ; 4.2.1 – 4.2.8 ; 4.0.0 – 4.0.6 ; … | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-45587 | 4.4.0 – 4.4.2 ; 4.2.1 – 4.2.8 ; 4.0.0 – 4.0.6 ; … | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-41836 | 4.4.0 ; 4.2.1 – 4.2.4 ; 4.0.0 – 4.0.6 ; … | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0, FortiS | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-41843 | 4.4.0 – 4.4.1 ; 4.2.1 – 4.2.5 ; 4.0.0 – 4.0.3 ; … | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | HIGH 7.3 | 0.6 % | ||
| CVE-2023-41680 | 4.4.0 – 4.4.1 ; 4.2.1 – 4.2.5 ; 4.0.0 – 4.0.3 ; … | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | HIGH 7.3 | 0.6 % | ||
| CVE-2023-41681 | 4.4.0 – 4.4.1 ; 4.2.1 – 4.2.5 ; 4.0.0 – 4.0.3 ; … | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through | HIGH 7.3 | 0.5 % | ||
| CVE-2023-41682 | 4.4.0 ; 4.2.1 – 4.2.5 ; 4.0.0 – 4.0.3 ; … | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox | HIGH 7.9 | 1.1 % | ||
| CVE-2022-22305 | 4.0.0 – 4.0.2 ; 3.2.0 – 3.2.4 ; 3.1.0 – 3.1.5 ; … | An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-27485 | 4.2.0 ; 4.0.0 – 4.0.2 ; 3.2.0 – 3.2.3 ; … | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox versi | MEDIUM 6.5 | 0.6 % | ||
| CVE-2022-27487 | 4.2.0 – 4.2.2 ; 4.0.0 – 4.0.2 ; 3.2.0 – 3.2.3 ; … | A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor | HIGH 8.8 | 1.0 % | ||
| CVE-2022-26115 | 4.0.0 – 4.0.2 ; 3.2.0 – 3.2.3 | A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker wit | HIGH 7.5 | 0.3 % | ||
| CVE-2022-30305 | 4.0.0 – 4.0.2 ; 3.2.0 – 3.2.3 ; 3.1.0 – 3.1.5 | An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor | HIGH 7.5 | 0.7 % | ||
| CVE-2018-1356 | 2.5.2 ; 2.5.1 ; 2.5.0 ; … | A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code | MEDIUM 6.1 | 0.9 % |