Skip to content
Patcharo

FortiSandbox

Fortinet FortiSandbox 4.4

Vulnerabilities, fixed releases, vendor recommendation and support status of the 4.4 branch, from official sources.

Sources last modified 23 Jul 2026 · Last verified by Patcharo: 1 Oct 2026 at 09:31 UTC

2
Matched CVEs

including 2 critical

2
CISA KEV
4.4.9
Newest fix stated
Supported · 10 Jan 2028
Support

In brief

Recommended maintenance build
No official recommendation
Recommended release
No official recommendation
Releases listed by the vendor
No release list read from the vendor
CERT-FR
2 documents

Vulnerabilities affecting 4.4

Each record matched to this branch with the fixed release the source states, newest first.

  1. CVE-2026-25089KEV

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Critical9.8CVSS 3.1, Critical
    First fixed release4.4.9
    Published
  2. CVE-2026-39808KEV

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Critical9.8CVSS 3.1, Critical
    First fixed release4.4.9
    Published

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Fortinet publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

Support status

From the vendor's published life-cycle policy; support is not a recommendation.

  1. 4.4
    SupportSupported
    End of support10 Jan 2028

Fortinet Product Life Cycle (software) · retrieved 1 Oct 2026 at 13:38 UTC

CERT-FR advisories and alerts

Documents of the French national CERT referencing these CVEs, newest first.

  • Advisory (AVI)CERTFR-2026-AVI-0725Multiple vulnerabilities in Fortinet productsPublished 10 Jun 2026
  • Advisory (AVI)CERTFR-2026-AVI-0440Multiple vulnerabilities in Fortinet productsPublished 15 Apr 2026

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

How Patcharo reads this

Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.

Read the methodologyRead the guide: FortiOS version numbering: branches, patch releases and the Feature and Mature labels

Other FortiSandbox branches

All FortiSandbox vulnerabilities and branches

Official sources