730 matches found
CVE-2026-39808
CVE-2026-39808 En noviembre de 2025, se descubrió una vulnerabilidad crítica en FortiSandbox de Fortinet que permitía a un atacante no autenticado ejecutar comandos en el sistema operativo subyacente como root. La vulnerabilidad fue corregida y finalmente se hizo pública en abril de 2026. Esta...
CVE-2026-25089
🚨 CVE-2026-25089 - Inyección Crítica de Comandos del SO en FortiSandbox 📖 Resumen CVE-2026-25089 es una vulnerabilidad crítica de Inyección de Comandos del SO CWE-78 que afecta a múltiples despliegues de Fortinet FortiSandbox. Un atacante remoto no autenticado puede explotar esta falla enviando...
Fortinet FortiSandbox - Command Injection
Fortinet FortiSandbox 4.4.0 through 4.4.8 contains a command injection caused by improper neutralization of special elements in OS commands, letting attackers execute unauthorized code or commands, exploit requires crafted input. id: CVE-2026-39808 info: name: Fortinet FortiSandbox - Command...
CVE-2026-25089
CVE-2026-25089 - Borrador - Fortinet FortiSandbox ⚡ Uso sencillo Use este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Ejemplo de configuración:...
CVE-2026-39808
🚨 Escape de Sandbox Root en FortiSandbox - CVE-2026-39808 🎯 Descripción general Este repositorio contiene un Proof of Concept limpio y bien documentado para CVE-2026-39808 — una vulnerabilidad crítica de inyección de comandos sin autenticación en Fortinet FortiSandbox que permite el escape de...
CVE-2026-39808
CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - Inyección de comandos del SO a través del endpoint tracer-behavior Fortinet FortiSandbox es una solución avanzada de protección contra amenazas que crea entornos aislados para analizar archivos sospechosos, URL y tráfico de red en busca de...
CVE-2026-39813
🛡️ CVE-2026-39813 - Vulnerabilidad de Path Traversal en Fortinet FortiSandbox 📌 Descripción General CVE-2026-39813 es una vulnerabilidad crítica de path traversal que afecta a Fortinet FortiSandbox. La vulnerabilidad se debe a una validación incorrecta de las rutas de archivo proporcionadas por el...
FortiSandbox-RCE-Exploit-CVE-2026-39808
Escáner RCE FortiSandbox — CVE-2026-39808 Inyección de comandos del sistema operativo sin autenticación como root en Fortinet FortiSandbox Vulnerabilidad • Instalación • Uso • Cómo funciona • Pipeline • Dorks de Shodan • Aviso legal Vulnerabilidad CVE-2026-39808 es una vulnerabilidad crítica de...
Vulnerabilities found in Fortinet’s Forti-products
Fortinet has identified vulnerabilities in FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM, and FortiSOAR. These vulnerabilities involve various types of errors in multiple Fortinet products. The mos...
Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the cronValue parameter passed to the writeremotebackuptocrontab...
CVE-2026-84387
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
CVE-2026-26084
Fortinet FortiSandbox is affected by an improper access control vulnerability (CVE-2026-26084) that may allow an unauthenticated, remote attacker to access sensitive information via crafted HTTP requests . Affected versions include FortiSandbox 5.0.0–5.0.5, 4.4.0–4.4.8, FortiSandbox Cloud 5.0.4–5...
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
EUVD-2026-72926
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
CVE-2026-84387
CVE-2026-84387 is a command injection vulnerability in Fortinet FortiSandbox affecting versions 5.2.0 , 5.0.0 through 5.0.6 , and 4.4.0 through 4.4.9 . The flaw involves improper neutralization of special elements in a command, potentially allowing an attacker to execute unauthorized code or comm...
EUVD-2026-72922
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
CVE-2026-84387
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
CVE-2026-84387
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
