CVE-2026-25691

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with...

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system allows a violator to delete any arbitrary directory.

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete any directory by sending speciall...

CVE-2026-25691: Improper Limitation of a Pathname to a Restricted Directory

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with...

CVE-2022-39844: Improper Validation of Integrity Check Value

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39845: Improper Validation of Integrity Check Value

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-33711: Improper Validation of Integrity Check Value

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...