FortiSandbox

23 results · Clear filters · Feed

• Medium 4.9
  CVE-2026-106172

  A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 th…

  Fortinet FortiSandbox FortiSandbox Cloud Network devices
  Oct 13, 2026
• Medium 4.8
  CVE-2026-106170

  An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox …

  Fortinet FortiSandbox Network devices
  Oct 13, 2026
• Medium 6.7
  CVE-2026-84387

  An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerabi…

  Fortinet FortiSandbox Network devices
  Sep 8, 2026
• Medium 4.9
  CVE-2025-61886

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…

  Fortinet FortiSandbox FortiSandbox PaaS Network devices
  Apr 14, 2026
• Medium 4.3
  CVE-2026-39812

  A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…

  Fortinet FortiSandbox FortiSandbox PaaS Network devices
  Apr 14, 2026
• Medium 6.2
  CVE-2026-25691

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…

  Fortinet FortiSandbox FortiSandbox PaaS FortiSandbox Cloud Network devices
  Apr 14, 2026
• Medium 4.6
  CVE-2025-53608

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…

  Fortinet FortiSandbox Network devices
  Mar 10, 2026
• Medium 6.9
  CVE-2025-53679 EPSS 12%

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vu…

  Fortinet FortiSandbox FortiSandbox Cloud Network devices
  Dec 9, 2025
• Medium 5.3
  CVE-2025-54353

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…

  Fortinet FortiSandbox Network devices
  Dec 9, 2025
• Medium 5.0
  CVE-2025-46215

  An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, For…

  Fortinet FortiSandbox Network devices
  Nov 18, 2025
• Medium 6.3
  CVE-2024-27779

  An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, versio…

  Fortinet FortiSandbox FortiIsolator Network devices
  Jul 18, 2025
• Medium 6.4
  CVE-2021-26105

  A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, ve…

  Fortinet FortiSandbox Network devices
  Mar 24, 2025
• Medium 4.1
  CVE-2024-54026

  An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 …

  Fortinet FortiSandbox FortiSandbox Cloud Network devices
  Mar 11, 2025
• Medium 6.5
  CVE-2024-54018 EPSS 10%

  Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox bef…

  Fortinet FortiSandbox Network devices
  Mar 11, 2025
• Medium 4.2
  CVE-2024-52960

  A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0…

  Fortinet FortiSandbox Network devices
  Mar 11, 2025
• Medium 6.9
  CVE-2024-27781 EPSS 28%

  An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…

  Fortinet FortiSandbox Network devices
  Feb 11, 2025
• Medium 4.2
  CVE-2024-31490

  An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.…

  Fortinet FortiSandbox Network devices
  Sep 10, 2024
• Medium 6.5
  CVE-2023-47540

  An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…

  Fortinet FortiSandbox Network devices
  Apr 9, 2024
• Medium 5.8
  CVE-2024-31487

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…

  Fortinet FortiSandbox Network devices
  Apr 9, 2024
• Medium 6.5
  CVE-2023-47541

  An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbo…

  Fortinet FortiSandbox Network devices
  Apr 9, 2024
• Medium 5.4
  CVE-2022-22305

  An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnaly…

  Fortinet FortiManager FortiAnalyzer FortiSandbox Network devices
  Sep 1, 2023
• Medium 6.2
  CVE-2022-27485

  A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortin…

  Fortinet FortiSandbox Network devices
  Apr 11, 2023
• Medium 5.4
  CVE-2022-26115

  A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may …

  Fortinet FortiSandbox Network devices
  Feb 16, 2023