Fortinet FortiSandbox 5.0.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*

part: a version: 5.0.4 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26084 vulnerable 2026-09-16 04:33:30.019436 Details available
HIGH (8.9)
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Published: 2026-09-08T16:41:47.842Z
Updated: 2026-09-08T17:31:37.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84387 vulnerable 2026-09-16 04:33:10.644545 Details available
MEDIUM (6.7)
A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-09-08T16:41:43.453Z
Updated: 2026-09-08T17:39:42.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25089 vulnerable 2026-07-29 00:32:02.110278 Details available
CRITICAL (9.1)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests
Published: 2026-06-09T14:27:47.492Z
Updated: 2026-07-17T03:56:23.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39813 vulnerable 2026-06-08 08:01:17.015598 Details available
CRITICAL (9.1)
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
Published: 2026-04-14T15:38:30.311Z
Updated: 2026-06-18T09:01:15.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39812 vulnerable 2026-06-08 08:01:16.964797 Details available
MEDIUM (4.3)
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.5, FortiSandbox PaaS 4.4.0 through 4.4.8, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:18.366Z
Updated: 2026-04-14T16:46:15.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27316 vulnerable 2026-06-08 07:53:22.220324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25691 vulnerable 2026-06-08 07:53:20.217050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67685 vulnerable 2026-06-08 07:41:20.292184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61886 vulnerable 2026-06-08 07:37:28.321309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.