Fortinet FortiSandbox vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20221
3. 202311
4. 20248
5. 202514
6. 202617

Known exploitedNewest addition to KEV first

• CVE-2026-25089

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…

  Fortinet · FortiSandbox

  ExploitedCritical9.1
• CVE-2026-39808

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may…

  Fortinet · FortiSandbox

  ExploitedCritical9.1

Newest CVEs

• CVE-2026-107656

  An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…

  Fortinet · FortiSandbox

  Critical9.6
• CVE-2026-106172

  A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all…

  Fortinet · FortiSandbox

  Medium4.9
• CVE-2026-106170

  An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4…

  Fortinet · FortiSandbox

  Medium4.8
• CVE-2026-26084

  A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5,…

  Fortinet · FortiSandbox PaaS

  High8.9
• CVE-2026-84387

  An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0,…

  Fortinet · FortiSandbox

  Medium6.7
• CVE-2026-59835

  A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an…

  Fortinet · FortiSandbox

  High7.7
• CVE-2026-25089

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…

  Fortinet · FortiSandbox

  ExploitedCritical9.1
• CVE-2026-26083

  A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5,…

  Fortinet · FortiSandbox

  Critical9.1
• CVE-2026-39813

  A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of…

  Fortinet · FortiSandbox

  Critical9.1
• CVE-2025-61886

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0…

  Fortinet · FortiSandbox PaaS

  Medium4.9