DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiSandbox: Mehrere Schwachstellen
view advisory published 2026-04-14
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Code zur Ausführung zu bringen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-39813US | — | Exploit | ||
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specia… | ||||
| CVE-2026-39812US | — | — | ||
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,… | ||||
| CVE-2026-39808US | —OT critical | KEV | ||
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execut… | ||||
| CVE-2026-27316US | — | — | ||
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an… | ||||
| CVE-2026-25691US | — | — | ||
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, Forti… | ||||
| CVE-2025-61886US | — | — | ||
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSand… | ||||
02
references
External citations — patches, advisories, analysis.
- PoC CVE-2026-39808 vom 2026-04-20external
- WID-SEC-W-2026-1094 - CSAF Versionself
- WID-SEC-2026-1094 - Portal Versionself
- Bleeping Computer vom 2026-06-15external
- FortiGuard Labs PSIRT Advisory FG-IR-26-100 vom 2026-04-14external
- FortiGuard Labs PSIRT Advisory FG-IR-26-109 vom 2026-04-14external
- FortiGuard Labs PSIRT Advisory FG-IR-26-110 vom 2026-04-14external
- FortiGuard Labs PSIRT Advisory FG-IR-26-112 vom 2026-04-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan