FortiSandbox at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 3 | 1 |
| Sep 2026 | 2 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 1 | 0 |
| Jun 2026 | 1 | 1 |
| May 2026 | 1 | 1 |
| Apr 2026 | 6 | 2 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 1 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 3 | 0 |
| Nov 2025 | 1 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 1 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 7 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 7.9NCSC-2026-0483 1 CVE
Kwetsbaarheid verholpen in Fortinet FortiSandbox
Fortinet heeft een kwetsbaarheid verholpen in meerdere versies van FortiSandbox.
-
High max 9.6
Fortinet FortiSandbox: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
first Oct 13, 2026 -
High max 9.6NCSC-2026-0428 3 CVEs
Kwetsbaarheden verholpen in Fortinet FortiSandbox
Fortinet heeft kwetsbaarheden verholpen in FortiSandbox.
-
High max 8.9
Fortinet FortiSandbox: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um Informationen offenzulegen oder Code auszuführen.
first Sep 8, 2026 -
High max 9.6NCSC-2026-0355 10 CVEs
Kwetsbaarheden verholpen in Fortinet Forti-producten
Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM en FortiSOAR.
53 results · Feed
-
High 7.9
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
Critical 9.6
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6,…
-
Medium 4.9
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 th…
-
Medium 4.8
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox …
-
High 8.9
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,…
-
Medium 6.7
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerabi…
-
High 7.7
A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 t…
-
Critical 9.1
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
KEV Jul 16, 2026 -
Critical 9.1
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, F…
-
Critical 9.1
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4…
-
Medium 4.9
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
Medium 4.3
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
Medium 6.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Critical 9.1
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
KEV Jul 16, 2026 -
Low 2.5
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all…
-
Medium 4.6
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
High 7.9
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
Low 3.4
A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4…
-
Medium 6.9CVE-2025-53679 EPSS 12%
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vu…
-
Medium 5.3
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
High 7.0CVE-2025-53949 EPSS 17%
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…
-
Medium 5.0
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, For…
-
Medium 6.3
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, versio…
-
Medium 6.4
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, ve…
-
High 7.8
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 an…
-
Medium 4.1
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 …
-
Medium 6.5CVE-2024-54018 EPSS 10%
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox bef…
-
Medium 4.2
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0…
-
High 8.6
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…
-
High 7.1
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged admi…
-
Medium 6.9CVE-2024-27781 EPSS 28%
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…
-
High 8.3
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…
-
Medium 4.2
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.…
-
High 8.6
A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSand…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 6.5
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
-
Medium 5.8
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Medium 6.5
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbo…
-
High 7.9
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…