Fortinet FortiSandbox authorization issue vulnerability

Versions 5.0.0 through 5.0.6, 4.4.0 through 4.4.9, and all versions 4.2 of Fortinet FortiSandbox are affected by an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, leading to authentication bypass. It may allow attackers to execute...

Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue results from the use of hard-coded...

Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the users field. The issue results from the lack of prop...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...

Fortinet FortiSandbox Panel - Detect

Fortinet FortiSandbox login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiSandbox login panel was discovered.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet...

Vulnerability handling in Fortinet FortiSandbox

Fortinet has identified a vulnerability in FortiSandbox. This vulnerability relates to an exposure or resource issue with the wrong spheres CWE-668 in the VNC-server component used within FortiSandbox’s scanning virtual machines. Unauthorized attackers can send network requests to gain access to...

EUVD-2026-43710

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests...

CVE-2026-59835: Exposure of Resource to Wrong Sphere

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 !Pythonhttps://img.shields.io/badge/Python...

Exploit for OS Command Injection in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Path Traversal in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

VulnCheck KEV: CVE-2026-39813

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests...

Fortinet FortiSandbox OS Command Injection Vulnerability (CNVD-2026-25587)

FortiSandbox is a security sandbox product provided by Fortinet, primarily used for detecting and analyzing malware. Fortinet FortiSandbox has a vulnerability related to OS command injection. This vulnerability stems from an inability to properly neutralize the special elements used in OS command...

CVE-2026-39813

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via...

CVE-2025-53844

creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios 2026-05-17 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm3epeyxsy2u...

CVE-2025-53870

creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios...

Fortinet FortiSandbox Cross-site Scripting Vulnerability (CNVD-2026-25595)

Fortinet FortiSandbox is a advanced threat protection solution, primarily used for detecting and analyzing malware and unknown threats. Fortinet FortiSandbox has a cross-site scripting vulnerability. This vulnerability stems from the failure to properly neutralize user inputs during web page...

EUVD-2025-209455

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability CWE-79 vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox PaaS 5.0.0 through 5.0.4 may allow an attacker to perform an XSS attack via crafted HTTP requests...

CVE-2026-39808

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via...

CVE-2026-39808: Improper Neutralization of Special Elements used in an OS Command

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via...