← Database

CVE-2026-25836

HIGH CVSS: 7.2 Published: 2026-03-10 Modified: 2026-06-17

Description

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests.

Affected Platforms

Fortinet Fortisandbox Cloud

Weakness Type

CWE-78

References