Fortinet FortiSandbox 5.0.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*

part: a version: 5.0.3 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26084 vulnerable 2026-09-16 04:33:30.020255 Details available
HIGH (8.9)
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Published: 2026-09-08T16:41:47.842Z
Updated: 2026-09-08T17:31:37.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84387 vulnerable 2026-09-16 04:33:10.645375 Details available
MEDIUM (6.7)
A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-09-08T16:41:43.453Z
Updated: 2026-09-08T17:39:42.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.111881 Details available
CRITICAL (9.1)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests
Published: 2026-06-09T14:27:47.492Z
Updated: 2026-07-17T03:56:23.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39813 vulnerable 2026-06-08 08:01:17.015747 Details available
CRITICAL (9.1)
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
Published: 2026-04-14T15:38:30.311Z
Updated: 2026-06-18T09:01:15.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.965504 Details available
MEDIUM (4.3)
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.5, FortiSandbox PaaS 4.4.0 through 4.4.8, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:18.366Z
Updated: 2026-04-14T16:46:15.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27316 vulnerable 2026-06-08 07:53:22.220447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.217741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.293053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61886 vulnerable 2026-06-08 07:37:28.322033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.