Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*

part: a version: 4.4.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-106172 vulnerable 2026-11-03 10:16:14.157017 Details available
MEDIUM (4.9)
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.0.4 through 5.0.6, FortiSandbox Cloud 5.0.0 through 5.0.2, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests
Published: 2026-10-13T17:37:16.459Z
Updated: 2026-11-06T15:42:03.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106170 vulnerable 2026-11-03 10:16:13.620549 Details available
MEDIUM (4.8)
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.
Published: 2026-10-13T17:37:10.883Z
Updated: 2026-11-06T15:42:02.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107656 vulnerable 2026-11-03 10:15:59.313816 Details available
CRITICAL (9.6)
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
Published: 2026-10-26T13:45:03.962Z
Updated: 2026-10-27T06:54:55.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26084 vulnerable 2026-09-16 04:33:30.027195 Details available
HIGH (8.9)
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Published: 2026-09-08T16:41:47.842Z
Updated: 2026-11-06T15:42:14.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84387 vulnerable 2026-09-16 04:33:10.656508 Details available
MEDIUM (6.7)
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.
Published: 2026-09-08T16:41:43.453Z
Updated: 2026-10-29T16:16:10.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.125657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39813 vulnerable 2026-06-08 08:01:17.016739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.969644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39808 vulnerable 2026-06-08 08:01:16.875516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27316 vulnerable 2026-06-08 07:53:22.223491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26083 vulnerable 2026-06-08 07:53:20.784451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.233190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.306447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54353 vulnerable 2026-06-08 07:33:12.470115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53949 vulnerable 2026-06-08 07:31:15.982491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53679 vulnerable 2026-06-08 07:31:14.908845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53608 vulnerable 2026-06-08 07:31:14.804245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52436 vulnerable 2026-06-08 07:31:11.589687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46215 vulnerable 2026-06-08 07:25:11.320919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54027 vulnerable 2026-06-08 06:54:15.928956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54026 vulnerable 2026-06-08 06:54:15.917362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54018 vulnerable 2026-06-08 06:54:15.888285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52961 vulnerable 2026-06-08 06:54:11.852233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52960 vulnerable 2026-06-08 06:54:11.816775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31491 vulnerable 2026-06-08 06:35:31.784028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31490 vulnerable 2026-06-08 06:35:31.781882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31487 vulnerable 2026-06-08 06:35:31.713700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27781 vulnerable 2026-06-08 06:31:29.224783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27779 vulnerable 2026-06-08 06:31:29.200876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27778 vulnerable 2026-06-08 06:31:29.180161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23671 vulnerable 2026-06-08 06:29:40.212951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21756 vulnerable 2026-06-08 06:27:36.483019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21755 vulnerable 2026-06-08 06:27:36.472295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47541 vulnerable 2026-06-08 06:14:24.910344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47540 vulnerable 2026-06-08 06:14:24.868015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45587 vulnerable 2026-06-08 06:12:42.840176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41844 vulnerable 2026-06-08 06:11:07.288915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41843 vulnerable 2026-06-08 06:11:07.281244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41836 vulnerable 2026-06-08 06:11:07.140222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41682 vulnerable 2026-06-08 06:11:06.433822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41681 vulnerable 2026-06-08 06:11:06.428648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41680 vulnerable 2026-06-08 06:11:06.402343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.