FortiSandbox vulnerabilities (CVE): affected branches, fixed releases, CISA KEV
Patcharo tracks 2 vulnerabilities matched against Fortinet FortiSandbox versions: 2 critical, 2 known exploited (CISA KEV), 0 with a fixed release. Last source modification: 23 Jul 2026.
Last verified by Patcharo: 30 Sept 2026 at 00:17 UTC
Not published in the catalog yet.
Branches
Per branch: matched CVEs, CISA KEV entries, the newest fixed release stated by the vendor and the support status.
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Fortinet publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.
All FortiSandbox CVEs
Fortinet FortiSandbox OS Command Injection Vulnerability
FortiSandboxCritical9.8CVSS 3.1, Critical76%Fortinet FortiSandbox OS Command Injection Vulnerability
FortiSandboxCritical9.8CVSS 3.1, Critical47%