Skip to content
Patcharo

Fortinet

FortiSandbox vulnerabilities (CVE): affected branches, fixed releases, CISA KEV

Affected branches, fixed releases stated by the vendor and known exploitation for Fortinet FortiSandbox.

Sources last modified 23 Jul 2026 · Last verified by Patcharo: 1 Oct 2026 at 09:31 UTC

2
CVEs tracked
2
Critical
2
CISA KEV
0
With a fixed release

Versions by branch

Per branch: the newest release the vendor lists, what the vendor recommends and for whom, the support state and when Patcharo last verified each fact. Three facts read from the vendor's documents and shown apart: the newest release is not a recommendation.

Filter the branches

17 branches shown

  1. 5.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 10 Dec 2030
    Vulnerabilities0 CVEs
  2. 5.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 7 May 2029
    Vulnerabilities1 CVE · 1 KEVnewest fix 5.0.6
  3. 4.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 10 Jan 2028
    Vulnerabilities2 CVEs · 2 KEVnewest fix 4.4.9
  4. 4.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 14 Nov 2025
    Vulnerabilities1 CVE · 1 KEV
  5. 4.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 19 Oct 2025
    Vulnerabilities0 CVEs
  6. 3.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 30 Oct 2024
    Vulnerabilities0 CVEs
  7. 3.1Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 18 Dec 2023
    Vulnerabilities0 CVEs
  8. 3.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 31 Jan 2023
    Vulnerabilities0 CVEs
  9. 2.5Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 2 May 2022
    Vulnerabilities0 CVEs
  10. 2.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 3 Nov 2021
    Vulnerabilities0 CVEs
  11. 2.3Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 28 Feb 2021
    Vulnerabilities0 CVEs
  12. 2.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 15 Sept 2020
    Vulnerabilities0 CVEs
  13. 2.1Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 13 Jan 2020
    Vulnerabilities0 CVEs
  14. 2.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 6 Jul 2019
    Vulnerabilities0 CVEs
  15. 1.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 11 Feb 2019
    Vulnerabilities0 CVEs
  16. 1.3Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 25 Dec 2018
    Vulnerabilities0 CVEs
  17. 1.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 3 Aug 2018
    Vulnerabilities0 CVEs

Last successful check against the source. The content may be unchanged. Checked about every 6 hours (192 hours for a branch past its support); “page verified recently” means a successful check within the last 24 hours. Availability, recommendation and support are read from the vendor's documents and shown apart; a release Patcharo lists is not advice to install it.

Vulnerability history

Every CVE NVD attaches to FortiSandbox over the period, whatever its score: published records only, rejected identifiers kept apart. Counts are publication counts.

Last 10 years · 14 Nov 2016 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.

The history could not be read right now. The list below shows the analysed catalog only.

Verified history · History not collected yet: the counts above are not a measure.

Scores and statuses are the facts known today, not their history.

CVEs published over the period

14 Nov 2016 – 14 Nov 2026 · Newest first. A record analysed by Patcharo links to its page with affected and fixed releases; the others show NVD's facts.

The history could not be read right now. The list below shows the analysed catalog only.

Analysed vulnerabilities

  1. CVE-2026-25089Published:

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox, Fortinet FortiSandbox Cloud, Fortinet FortiSandbox PaaS

    Critical9.8CVSS 3.1, CriticalKEVDue 19 Jul 2026EPSS76%
  2. CVE-2026-39808Published:

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox, Fortinet FortiSandbox PaaS

    Critical9.8CVSS 3.1, CriticalKEVDue 19 Jul 2026EPSS47%

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Fortinet publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

CERT-FR

Advisories and alerts of the French national CERT referencing the CVEs of this product.

  • Advisory (AVI)CERTFR-2026-AVI-0725Multiple vulnerabilities in Fortinet productsPublished 10 Jun 2026
  • Advisory (AVI)CERTFR-2026-AVI-0440Multiple vulnerabilities in Fortinet productsPublished 15 Apr 2026

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

Official sources