| CVE-2026-106172 |
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0…
|
4.9
Medium
|
Oct 13, 2026 |
| CVE-2026-26084 |
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
8.9
High
|
Sep 8, 2026 |
| CVE-2026-25089 |
Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critical
|
Jun 9, 2026 |
| CVE-2026-26083 |
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8,…
|
9.1
Critical
|
May 12, 2026 |
| CVE-2026-39813 |
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
9.1
Critical
|
Apr 14, 2026 |
| CVE-2026-25691 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2026-25836 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
6.7
Medium
|
Mar 10, 2026 |
| CVE-2025-53679 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.9
Medium
|
Dec 9, 2025 |
| CVE-2024-54026 |
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0…
|
4.1
Medium
|
Mar 11, 2025 |