Login Request a demo
FP
Product
FortiSandbox PaaS
by Fortinet · last CVE Oct 26, 2026
On CISA KEVExploited in the wild
10
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities10In the news4Timeline
Severity mix
Critical 5High 1Medium 3Low 1
Severity
All severities10Critical5High1Medium3Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add FortiSandbox PaaS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25089
In wildKEV
9.8
76%
Jun 9
Fortinet FortiSandbox OS Command Injection Vulnerability
Affected: 5.0.4 through 5.0.5
CVE-2026-39808
In wildKEV
9.8
93%
Apr 14
Fortinet FortiSandbox OS Command Injection Vulnerability
Affected: 23.4.4374; 23.4.4350; 23.3.4329; 23.1.4245; 22.2.4151; 22.2.4134; +3 more
CVE-2026-26084
9.9
0%
Sep 8
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS…
Affected: 5.0.4 through 5.0.5
CVE-2026-107656
New
9.8
1%
Oct 26
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all…
Affected: 5.0.0 through 5.0.6; 4.4.0 through 4.4.9; 4.2.1 through 4.2.8
CVE-2026-26083
9.8
1%
May 12
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS…
Affected: 23.4.4374; 23.4.4350; 23.3.4329; 23.1.4245; 22.2.4151; 22.2.4134; +5 more
Showing 5