Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*

part: a version: 4.4.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.125657 Details available
CRITICAL (9.1)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests
Published: 2026-06-09T14:27:47.492Z
Updated: 2026-07-17T03:56:23.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39813 vulnerable 2026-06-08 08:01:17.016739 Details available
CRITICAL (9.1)
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
Published: 2026-04-14T15:38:30.311Z
Updated: 2026-06-18T09:01:15.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.969644 Details available
MEDIUM (4.3)
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.5, FortiSandbox PaaS 4.4.0 through 4.4.8, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:18.366Z
Updated: 2026-04-14T16:46:15.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39808 vulnerable 2026-06-08 08:01:16.875516 Details available
CRITICAL (9.1)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:02.089Z
Updated: 2026-07-17T03:56:21.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27316 vulnerable 2026-06-08 07:53:22.223491 Details available
LOW (2.5)
A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.
Published: 2026-04-14T15:38:02.149Z
Updated: 2026-04-14T16:46:17.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26083 vulnerable 2026-06-08 07:53:20.784451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.233190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.306447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54353 vulnerable 2026-06-08 07:33:12.470115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53949 vulnerable 2026-06-08 07:31:15.982491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53679 vulnerable 2026-06-08 07:31:14.908845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53608 vulnerable 2026-06-08 07:31:14.804245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52436 vulnerable 2026-06-08 07:31:11.589687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46215 vulnerable 2026-06-08 07:25:11.320919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54027 vulnerable 2026-06-08 06:54:15.928956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54026 vulnerable 2026-06-08 06:54:15.917362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54018 vulnerable 2026-06-08 06:54:15.888285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52961 vulnerable 2026-06-08 06:54:11.852233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52960 vulnerable 2026-06-08 06:54:11.816775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31491 vulnerable 2026-06-08 06:35:31.784028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31490 vulnerable 2026-06-08 06:35:31.781882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31487 vulnerable 2026-06-08 06:35:31.713700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27781 vulnerable 2026-06-08 06:31:29.224783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27779 vulnerable 2026-06-08 06:31:29.200876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27778 vulnerable 2026-06-08 06:31:29.180161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23671 vulnerable 2026-06-08 06:29:40.212951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21756 vulnerable 2026-06-08 06:27:36.483019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21755 vulnerable 2026-06-08 06:27:36.472295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47541 vulnerable 2026-06-08 06:14:24.910344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47540 vulnerable 2026-06-08 06:14:24.868015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45587 vulnerable 2026-06-08 06:12:42.840176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41844 vulnerable 2026-06-08 06:11:07.288915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41843 vulnerable 2026-06-08 06:11:07.281244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41836 vulnerable 2026-06-08 06:11:07.140222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41682 vulnerable 2026-06-08 06:11:06.433822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41681 vulnerable 2026-06-08 06:11:06.428648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41680 vulnerable 2026-06-08 06:11:06.402343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.