Fortinet FortiSandbox vulnerabilities

9 advisories, 2 actively exploited. Last update: October 13, 2026.

Running FortiSandbox devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiSandbox alerts

FG-IR-26-185October 13, 2026Critical 9.6
Fortinet: Improper access control and session management in the web management interface
FG-IR-26-179October 13, 2026Medium 4.9
Fortinet: Fabric API Authentication bypass
FG-IR-26-176October 13, 2026Medium 4.8
Fortinet: Persistent Denial of Service in Admin Profile
FG-IR-26-166September 8, 2026Critical 9.9
Fortinet: Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
FG-IR-26-167September 8, 2026Medium 6.7
Fortinet: Cron Job Injection in Remote Backup
CVE-2026-25089July 16, 2026Critical 9.8Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-39808July 16, 2026Critical 9.8Exploited
Fortinet FortiSandbox OS Command Injection Vulnerability
FG-IR-26-145July 14, 2026High 8.6
Fortinet: Unauthenticated VNC access exposed on all interfaces
FG-IR-26-141June 9, 2026Critical 9.8
Fortinet: Second-Order OS Command Injection via JSON Input on start vnc feature