Fortinet FortiSandbox vulnerabilities
3 known CVE vulnerabilities in Fortinet FortiSandbox, translated and rated.
- CVE-2026-26084Critical
An improper access control vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.5, 4.4.0 through 4.4.8, Cloud 5.0.4 through 5.0.5, and PaaS 5.0.4 through 5.0.5 may allow an attacker to access sensitive information via crafted HTTP requests.
- CVE-2025-54353Medium
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.2, 4.4.0 through 4.4.7, 4.2 all versions, and 4.0 all versions may allow an attacker to perform an XSS attack via crafted HTTP requests.
- CVE-2026-25691Medium
Fortinet FortiSandbox (5.0.0–5.0.5, 4.4.0–4.4.8, all 4.2 versions, FortiSandbox Cloud 5.0.4, and PaaS 5.0.4) contains a path traversal vulnerability. A privileged attacker with super-admin profile and CLI access can delete an arbitrary directory via crafted HTTP requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS