CVE-2026-39808

CVE-2026-39808 2025年11月，Fortinet 的 FortiSandbox 中发现了一个严重漏洞，允许未经身份验证的攻击者以 root 身份在底层操作系统中执行命令。该漏洞已被修复，并最终于2026年4月公开。 该漏洞影响 FortiSandbox 4.4.0 至 4.4.8 版本。 完整公告见此处。 漏洞详情 该漏洞影响 /fortisandbox/job-detail/tracer-behavior 端点。通过在 jid GET 参数中使用管道符（|）即可注入操作系统命令。 在上面的示例中，输出被重定向到 Web 根目录下的一个文件，以便之后可以获取。 PoC...

CVE-2026-39813

🛡️ CVE-2026-39813 - Vulnerabilidad de Path Traversal en Fortinet FortiSandbox 📌 Descripción General CVE-2026-39813 es una vulnerabilidad crítica de path traversal que afecta a Fortinet FortiSandbox. La vulnerabilidad se debe a una validación incorrecta de las rutas de archivo proporcionadas por el...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - Inyección de comandos del SO a través del endpoint tracer-behavior Fortinet FortiSandbox es una solución avanzada de protección contra amenazas que crea entornos aislados para analizar archivos sospechosos, URL y tráfico de red en busca de...

Fortinet FortiSandbox - Command Injection

Fortinet FortiSandbox 4.4.0 through 4.4.8 contains a command injection caused by improper neutralization of special elements in OS commands, letting attackers execute unauthorized code or commands, exploit requires crafted input. id: CVE-2026-39808 info: name: Fortinet FortiSandbox - Command...

CVE-2026-25089

🚨 CVE-2026-25089 - FortiSandbox 关键操作系统命令注入漏洞 📖 概述 CVE-2026-25089 是影响多个 Fortinet FortiSandbox 部署的一个关键 操作系统命令注入（CWE-78） 漏洞。 未经身份验证的远程攻击者可通过发送特制 HTTP 请求利用此缺陷，从而在底层操作系统上执行任意命令。 ⚠️ 成功利用可能导致设备完全沦陷及远程代码执行（RCE）。 🎯 漏洞详情 字段| 值 ---|--- CVE| CVE-2026-25089 严重性| Critical CWE| CWE-78 攻击类型| 操作系统命令注入 认证| 不需要 用户交互...

CVE-2026-39808

🚨 Escape de Sandbox Root en FortiSandbox - CVE-2026-39808 🎯 Descripción general Este repositorio contiene un Proof of Concept limpio y bien documentado para CVE-2026-39808 — una vulnerabilidad crítica de inyección de comandos sin autenticación en Fortinet FortiSandbox que permite el escape de...

CVE-2026-25089

CVE-2026-25089 - 草案 - Fortinet FortiSandbox ⚡ 简单使用 仅在安全和授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离实验室设置 授权的渗透测试环境 示例设置： root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-25089 cd CVE-2026-25089 Project use python follow below Create a virtual environment python -m venv venv Activate the...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE-Scanner — CVE-2026-39808 Nicht authentifizierte OS-Befehlsinjektion als root in Fortinet FortiSandbox Schwachstelle • Installation • Verwendung • Funktionsweise • Pipeline • Shodan-Dorks • Haftungsausschluss Schwachstelle CVE-2026-39808 ist eine kritische, nicht authentifizierte...

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests...

CVE-2026-59835

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests...

CVE-2026-59835

Technical details about CVE-2026-59835 are not publicly available in the provided documents. Monitor for updates from Fortinet/NVD/CVE listings for affected products, vulnerable components, and fixes.

CVE-2026-59835

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests...

PT-2026-58073

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.2 FortiSandbox versions 4.4.3 through 4.4.8 Description An exposure of resource to wrong sphere issue allows an unauthenticated attacker to access the VNC server of virtual machines performing malware...

Fortinet FortiSandbox 4.4.x < 4.4.9 / 5.0.x < 5.0.6 Multiple Vulnerabilities

The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9 or 5.0.x prior to 5.0.6. It is, therefore, affected by multiple vulnerabilities: - An OS command injection vulnerability may allow an unauthenticated attacker to execute unauthorized commands via specificall...

Fortinet FortiSandbox 4.4.x < 4.4.9 OS Command Injection (FG-IR-26-100)

The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9. It is, therefore, affected by a vulnerability: - An improper neutralization of special elements used in an OS command injection vulnerability may allow an attacker to execute unauthorized code or commands...

Exploit for OS Command Injection in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Path Traversal in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems allows a perpetrator to execute arbitrary commands through specially crafted HTTP requests.

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems lies in the lack of measures taken to neutralize specific elements within the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through specially...

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours...