Vulnerabilities fixed in Fortinet FortiSandbox (advisories.ncsc.nl)
0xBASE INTEL BRIEF
- Two critical vulnerabilities in FortiSandbox patched
- OS command injection and path traversal in JRPC API
- Immediate update recommended
"Fortinet has fixed multiple vulnerabilities in FortiSandbox (on-premises and cloud), including two rated critical. Attackers can exploit these via crafted HTTP requests to execute code or bypass authentication. Vulnerabilities include OS command injection (CVE-2026-39813), path traversal (CVE-2026-39808), and XSS."
no comments yet.