Skip to content
fr Sign in
6.7 Medium

CVE-2026-84387 An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77]…

Description

An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
FortiSandbox 5.2.0 No fix stated
FortiSandbox 5.0 5.0.0 → 5.0.6 No fix stated
FortiSandbox 4.4 4.4.0 → 4.4.9 No fix stated
FortiSandbox 4.2 4.2.1 → 4.2.8 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSandbox

The 52 CVEs of FortiSandbox →
CVE-2026-107656 An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through… 9.6 Critical CVE-2026-106172 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0… 4.9 Medium CVE-2026-106170 An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox… 4.8 Medium CVE-2026-26084 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through… 8.9 High
Track this CVE