Skip to contentFortinet Fortisandbox vulnerabilities
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-262487.9 High
- fortinet fortisandbox, fortisandbox paas +1 moreAn authentication bypass using an alternate path or channel vulnerability in Fortinet...CVE-2026-1076569.6 Critical
- fortinet fortisandbox, fortisandbox cloud +1 moreA use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1,...CVE-2026-1061724.9 Medium
- fortinet fortisandboxAn Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0...CVE-2026-1061704.8 Medium
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,...CVE-2026-260848.9 High
- fortinet fortisandboxA improper neutralization of special elements used in a command ('command injection')...CVE-2026-843876.7 Medium
- fortinet fortisandboxA exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2...CVE-2026-598357.7 High
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-25089In KEVPublic exploitEPSS 76.1%9.1 Critical
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox...CVE-2026-260839.1 Critical
- fortinet fortisandboxA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,...CVE-2026-39813Public exploitEPSS 22.6%9.1 Critical
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-618864.9 Medium
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-398124.3 Medium
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...CVE-2026-256916.2 Medium
- fortinet fortisandbox, fortisandbox paas +1 moreA improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-39808In KEVPublic exploitEPSS 93.2%9.1 Critical
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5...CVE-2026-273162.5 Low
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-536084.6 Medium
- fortinet fortisandbox cloud, fortisandbox paas +1 moreAn improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-258366.7 Medium
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-524367.9 High
- fortinet fortisandboxA Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet...CVE-2025-676853.4 Low
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-53679EPSS 11.9%6.9 Medium
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-543535.3 Medium
- fortinet fortisandboxAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2025-53949EPSS 16.8%7.0 High
- fortinet fortisandboxAn Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5...CVE-2025-462155.0 Medium
- fortinet fortiisolator, fortisandbox +1 moreAn insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4...CVE-2024-277796.3 Medium
- fortinet fortisandboxA stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox...CVE-2021-261056.4 Medium
- fortinet fortisandboxA Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and...CVE-2024-540277.8 High
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2024-540264.1 Medium
- fortinet fortisandboxMultiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE...CVE-2024-54018EPSS 10.0%6.5 Medium
- fortinet fortisandboxA client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet...CVE-2024-529604.2 Medium
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...CVE-2024-529618.6 High
- fortinet fortisandboxAn incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow...CVE-2024-453287.1 High
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2024-27781EPSS 28.2%6.9 Medium
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...CVE-2024-277788.3 High
- fortinet fortisandboxAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSandbox version 4...CVE-2024-314904.2 Medium
- fortinet fortisandboxA client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through...CVE-2024-314918.6 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-217558.6 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-217568.6 High
- fortinet fortisandboxAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-475406.5 Medium
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-314875.8 Medium
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-236717.9 High
- fortinet fortisandboxAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2023-475416.5 Medium
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-418443.4 Low
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-455873.4 Low
- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-418363.4 Low
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-418437.3 High
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-416807.3 High
- fortinet fortisandboxA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-416817.3 High
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2023-416827.9 High
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6...CVE-2022-223055.4 Medium
- fortinet fortisandboxA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2022-274856.2 Medium
- Show olderLoading…