FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE 扫描器 — CVE-2026-39808 Fortinet FortiSandbox 中未经身份验证的 root 权限操作系统命令注入 漏洞 • 安装 • 用法 • 工作原理 • 管道集成 • Shodan 搜索语法 • 免责声明 漏洞 CVE-2026-39808 是 Fortinet FortiSandbox 中的一个严重未经身份验证的操作系统命令注入漏洞。/fortisandbox/job-detail/tracer-behavior API 端点未能对 jid 参数进行清理，允许攻击者在无需任何身份验证的情况下注入以 root...

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours...

VulnCheck KEV: CVE-2026-39808

Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests...

Exploit for OS Command Injection in Fortinet Fortisandbox

FortiSandbox RCE Scanner — CVE-2026-39808...