Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-39808

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execut

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiSandbox

Default version status: unaffected

  • 4.4.0 to ≤ 4.4.8affected

Fortinet FortiSandbox PaaS

Default version status: unaffected

  • 23.4.4374affected
  • 23.4.4350affected
  • 23.3.4329affected
  • 23.1.4245affected
  • 22.2.4151affected
  • 22.2.4134affected
  • 22.1.4113affected
  • 21.4.4072affected
  • 21.3.4055affected

References