中文

// CVE · PUBLISHED 2026-04-14

CVE-2026-39808

Fortinet / FortiSandbox · Fortinet / FortiSandbox PaaS

9.8 · CVSS 3.1CriticalCISA KEV

CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.