FC
Product
FortiSandbox Cloud
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 4High 0Medium 2Low 0
Watch
Add FortiSandbox Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25089 In wildKEV | 9.8 | Jun 9 | Fortinet FortiSandbox OS Command Injection Vulnerability Affected: 5.0.4 through 5.0.5 |
| CVE-2026-26084 | 9.9 | Sep 8 | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS… Affected: 5.0.4 through 5.0.5 |
| CVE-2026-26083 | 9.8 | May 12 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS… Affected: 5.0.0 through 5.0.1; 4.4.5 through 4.4.8 |
| CVE-2026-39813 | 9.8 | Apr 14 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via… Affected: 24.1; 23.4; 5.0.4 through 5.0.5 |
| CVE-2026-25691 | 6.7 | Apr 14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,… Affected: 5.0.4 |
| CVE-2026-106172 | 5.3 | Oct 13 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox… Affected: 5.0.4 through 5.0.6; 5.0.0 through 5.0.2; 4.4.0 through 4.4.9 |
Showing 6