Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*

part: a version: 4.2.6 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26084 vulnerable 2026-09-16 04:33:30.028855 Details available
HIGH (8.9)
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Published: 2026-09-08T16:41:47.842Z
Updated: 2026-09-08T17:31:37.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84387 vulnerable 2026-09-16 04:33:10.658991 Details available
MEDIUM (6.7)
A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-09-08T16:41:43.453Z
Updated: 2026-09-08T17:39:42.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.128044 Details available
CRITICAL (9.1)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests
Published: 2026-06-09T14:27:47.492Z
Updated: 2026-07-17T03:56:23.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.974669 Details available
MEDIUM (4.3)
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.5, FortiSandbox PaaS 4.4.0 through 4.4.8, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:18.366Z
Updated: 2026-04-14T16:46:15.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26083 vulnerable 2026-06-08 07:53:20.784512 Details available
CRITICAL (9.1)
A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.0 through 5.0.1, FortiSandbox PaaS 4.4.5 through 4.4.8 may allow an unauthenticated attacker to execute unauthorized code or commands via HTTP requests.
Published: 2026-05-12T16:54:04.923Z
Updated: 2026-07-08T12:50:53.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.235255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.309263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54353 vulnerable 2026-06-08 07:33:12.472345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53949 vulnerable 2026-06-08 07:31:15.982546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53679 vulnerable 2026-06-08 07:31:14.908993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53608 vulnerable 2026-06-08 07:31:14.804309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52436 vulnerable 2026-06-08 07:31:11.592468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46215 vulnerable 2026-06-08 07:25:11.323187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54027 vulnerable 2026-06-08 06:54:15.929104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54026 vulnerable 2026-06-08 06:54:15.919666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54018 vulnerable 2026-06-08 06:54:15.888308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52961 vulnerable 2026-06-08 06:54:11.852368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52960 vulnerable 2026-06-08 06:54:11.818435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31491 vulnerable 2026-06-08 06:35:31.784170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31490 vulnerable 2026-06-08 06:35:31.782007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31487 vulnerable 2026-06-08 06:35:31.714557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27781 vulnerable 2026-06-08 06:31:29.224976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27779 vulnerable 2026-06-08 06:31:29.200996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27778 vulnerable 2026-06-08 06:31:29.180838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23671 vulnerable 2026-06-08 06:29:40.213631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21756 vulnerable 2026-06-08 06:27:36.483103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21755 vulnerable 2026-06-08 06:27:36.475314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47541 vulnerable 2026-06-08 06:14:24.910680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47540 vulnerable 2026-06-08 06:14:24.868758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45587 vulnerable 2026-06-08 06:12:42.842979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41844 vulnerable 2026-06-08 06:11:07.294363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.