High WID-SEC-2026-3257 2 CVEs

Fortinet FortiSandbox: Mehrere Schwachstellen

Published Sep 8, 2026 · Updated Sep 9, 2026 · Revision 2 · de-DE

Vendor: Fortinet Product: FortiSandbox

Summary

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um Informationen offenzulegen oder Code auszuführen.

Product

FortiSandbox ist eine Advanced Threat Detection Appliance.

Vulnerabilities 2

High 8.9

CVE-2026-26084

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,…

Fortinet FortiSandbox FortiSandbox PaaS FortiSandbox Cloud Network devices

Sep 8, 2026
Medium 6.7

CVE-2026-84387

An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerabi…

Fortinet FortiSandbox Network devices

Sep 8, 2026

Revision history

2026-09-09 #2
Referenz(en) aufgenommen: ZDI-26-645, ZDI-CAN-30081
2026-09-08 #1
Initiale Fassung

References

FortiGuard Labs PSIRT Advisory FG-IR-26-166 vom 2026-09-08
https://www.fortiguard.com/psirt/FG-IR-26-166
FortiGuard Labs PSIRT Advisory FG-IR-26-167 vom 2026-09-08
https://www.fortiguard.com/psirt/FG-IR-26-167