| CVE-2026-107656 |
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…
|
9.6
Critical
|
Oct 26, 2026 |
| CVE-2026-106172 |
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0…
|
4.9
Medium
|
Oct 13, 2026 |
| CVE-2026-106170 |
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox…
|
4.8
Medium
|
Oct 13, 2026 |
| CVE-2026-26084 |
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
8.9
High
|
Sep 8, 2026 |
| CVE-2026-84387 |
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77]…
|
6.7
Medium
|
Sep 8, 2026 |
| CVE-2026-59835 |
A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3…
|
7.7
High
|
Jul 14, 2026 |
| CVE-2026-25089 |
Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critical
|
Jun 9, 2026 |
| CVE-2026-26083 |
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8,…
|
9.1
Critical
|
May 12, 2026 |
| CVE-2026-39813 |
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
9.1
Critical
|
Apr 14, 2026 |
| CVE-2025-61886 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
4.9
Medium
|
Apr 14, 2026 |
| CVE-2026-39812 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
4.3
Medium
|
Apr 14, 2026 |
| CVE-2026-25691 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2026-27316 |
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4…
|
2.5
Low
|
Apr 14, 2026 |
| CVE-2026-39808 |
Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critical
|
Apr 14, 2026 |
| CVE-2025-53608 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
4.6
Medium
|
Mar 10, 2026 |
| CVE-2025-52436 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
7.9
High
|
Feb 10, 2026 |
| CVE-2025-67685 |
A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4,…
|
3.4
Low
|
Jan 13, 2026 |
| CVE-2025-53679 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.9
Medium
|
Dec 9, 2025 |
| CVE-2025-54353 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
5.3
Medium
|
Dec 9, 2025 |
| CVE-2025-53949 |
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78]…
|
7.0
High
|
Dec 9, 2025 |
| CVE-2025-46215 |
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1,…
|
5.0
Medium
|
Nov 18, 2025 |
| CVE-2024-27779 |
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
|
6.3
Medium
|
Jul 18, 2025 |
| CVE-2021-26105 |
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below,…
|
6.4
Medium
|
Mar 24, 2025 |
| CVE-2024-54027 |
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and…
|
7.8
High
|
Mar 17, 2025 |
| CVE-2024-54026 |
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0…
|
4.1
Medium
|
Mar 11, 2025 |