Description
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSandbox | 5.2.0, 5.0.0 – ≤ 5.0.6, 4.4.0 – ≤ 4.4.9, 4.2.1 – ≤ 4.2.8 | — |
Advisories 2
- WID-SEC-2026-3257 Fortinet FortiSandbox: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026
- NCSC-2026-0355 Kwetsbaarheden verholpen in Fortinet Forti-producten NCSC-NL (Netherlands) · Sep 9, 2026