CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/03/15 6:16 a.m.•7 views

CVE-2024-54026

An improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandb...

8.8CVSS7.7AI score0.00386EPSS

Exploits0References1

Circl•added 2025/03/11 5:37 p.m.•15 views

CVE-2024-54026

creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:33+00:00| seen| https://t.me/cvedetector/20090 2025-03-11 18:06:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsruchi2n 2025-03-12 09:51:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0083...

8.8CVSS4.8AI score0.00386EPSS

Exploits0References3

CVE•added 2025/03/11 2:54 p.m.•52 views

CVE-2024-54026

CVE-2024-54026 affects Fortinet FortiSandbox family (FortiSandbox 4.4.x, 4.2.x, 4.0.x, 3.2.x, 3.1.x, 3.0.x, and FortiSandbox Cloud 24.1) with an SQL injection due to improper neutralization of SQL commands. An attacker can exploit this via specially crafted HTTP requests to execute unauthorized c...

8.8CVSS7.2AI score0.00386EPSS

Exploits0References1Affected Software2