| CVE-2026-107656 |
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…
|
9.6
Critical
|
Oct 26, 2026 |
| CVE-2026-26084 |
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
|
8.9
High
|
Sep 8, 2026 |
| CVE-2026-25089 |
Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critical
|
Jun 9, 2026 |
| CVE-2026-26083 |
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8,…
|
9.1
Critical
|
May 12, 2026 |
| CVE-2025-61886 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
4.9
Medium
|
Apr 14, 2026 |
| CVE-2026-39812 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
4.3
Medium
|
Apr 14, 2026 |
| CVE-2026-25691 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2026-27316 |
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4…
|
2.5
Low
|
Apr 14, 2026 |
| CVE-2026-39808 |
Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
|
9.1
Critical
|
Apr 14, 2026 |
| CVE-2026-25836 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
6.7
Medium
|
Mar 10, 2026 |