| CVE-2026-107656 |
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…
|
9.6
Critique
|
26 oct. 2026 |
| CVE-2026-106172 |
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0…
|
4.9
Moyenne
|
13 oct. 2026 |
| CVE-2026-106170 |
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox…
|
4.8
Moyenne
|
13 oct. 2026 |
| CVE-2026-26084 |
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
8.9
Élevée
|
8 sept. 2026 |
| CVE-2026-84387 |
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77]…
|
6.7
Moyenne
|
8 sept. 2026 |
| CVE-2026-59835 |
A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3…
|
7.7
Élevée
|
14 juil. 2026 |
| CVE-2026-25089 |
Exploitée
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critique
|
9 juin 2026 |
| CVE-2026-26083 |
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8,…
|
9.1
Critique
|
12 mai 2026 |
| CVE-2026-39813 |
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
9.1
Critique
|
14 avr. 2026 |
| CVE-2025-61886 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
4.9
Moyenne
|
14 avr. 2026 |
| CVE-2026-39812 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
4.3
Moyenne
|
14 avr. 2026 |
| CVE-2026-25691 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.2
Moyenne
|
14 avr. 2026 |
| CVE-2026-27316 |
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4…
|
2.5
Faible
|
14 avr. 2026 |
| CVE-2026-39808 |
Exploitée
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critique
|
14 avr. 2026 |
| CVE-2025-53608 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
4.6
Moyenne
|
10 mars 2026 |
| CVE-2025-52436 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
7.9
Élevée
|
10 févr. 2026 |
| CVE-2025-67685 |
A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4,…
|
3.4
Faible
|
13 janv. 2026 |
| CVE-2025-53679 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.9
Moyenne
|
9 déc. 2025 |
| CVE-2025-54353 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
5.3
Moyenne
|
9 déc. 2025 |
| CVE-2025-53949 |
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78]…
|
7.0
Élevée
|
9 déc. 2025 |
| CVE-2025-46215 |
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1,…
|
5.0
Moyenne
|
18 nov. 2025 |
| CVE-2024-27779 |
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
|
6.3
Moyenne
|
18 juil. 2025 |
| CVE-2021-26105 |
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below,…
|
6.4
Moyenne
|
24 mars 2025 |
| CVE-2024-54027 |
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and…
|
7.8
Élevée
|
17 mars 2025 |
| CVE-2024-54026 |
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0…
|
4.1
Moyenne
|
11 mars 2025 |