Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*

part: a version: 4.4.1 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-106172 vulnerable 2026-11-03 10:16:14.156277 Details available
MEDIUM (4.9)
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.0.4 through 5.0.6, FortiSandbox Cloud 5.0.0 through 5.0.2, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests
Published: 2026-10-13T17:37:16.459Z
Updated: 2026-11-06T15:42:03.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106170 vulnerable 2026-11-03 10:16:13.615566 Details available
MEDIUM (4.8)
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.
Published: 2026-10-13T17:37:10.883Z
Updated: 2026-11-06T15:42:02.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107656 vulnerable 2026-11-03 10:15:59.312967 Details available
CRITICAL (9.6)
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
Published: 2026-10-26T13:45:03.962Z
Updated: 2026-10-27T06:54:55.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26084 vulnerable 2026-09-16 04:33:30.026653 Details available
HIGH (8.9)
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Published: 2026-09-08T16:41:47.842Z
Updated: 2026-11-06T15:42:14.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84387 vulnerable 2026-09-16 04:33:10.655626 Details available
MEDIUM (6.7)
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.
Published: 2026-09-08T16:41:43.453Z
Updated: 2026-10-29T16:16:10.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.124180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39813 vulnerable 2026-06-08 08:01:17.016711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.969618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39808 vulnerable 2026-06-08 08:01:16.874844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27316 vulnerable 2026-06-08 07:53:22.223353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26083 vulnerable 2026-06-08 07:53:20.784430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.232509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.305690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54353 vulnerable 2026-06-08 07:33:12.469351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53949 vulnerable 2026-06-08 07:31:15.982472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53679 vulnerable 2026-06-08 07:31:14.908707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53608 vulnerable 2026-06-08 07:31:14.804225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52436 vulnerable 2026-06-08 07:31:11.588805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46215 vulnerable 2026-06-08 07:25:11.320350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54027 vulnerable 2026-06-08 06:54:15.928937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54026 vulnerable 2026-06-08 06:54:15.917339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54018 vulnerable 2026-06-08 06:54:15.888263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52961 vulnerable 2026-06-08 06:54:11.852107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52960 vulnerable 2026-06-08 06:54:11.816007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31491 vulnerable 2026-06-08 06:35:31.784000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31490 vulnerable 2026-06-08 06:35:31.781855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31487 vulnerable 2026-06-08 06:35:31.712430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27781 vulnerable 2026-06-08 06:31:29.224762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27779 vulnerable 2026-06-08 06:31:29.200856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27778 vulnerable 2026-06-08 06:31:29.179143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23671 vulnerable 2026-06-08 06:29:40.212244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21756 vulnerable 2026-06-08 06:27:36.483084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21755 vulnerable 2026-06-08 06:27:36.474734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47541 vulnerable 2026-06-08 06:14:24.910540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47540 vulnerable 2026-06-08 06:14:24.867350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45587 vulnerable 2026-06-08 06:12:42.839444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41844 vulnerable 2026-06-08 06:11:07.288886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41843 vulnerable 2026-06-08 06:11:07.281198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41681 vulnerable 2026-06-08 06:11:06.428599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41680 vulnerable 2026-06-08 06:11:06.401773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.