CVE-2025-61886

MEDIUM 5.4CVE-2025-61886 · Published 14/04/2026 · updated 14/10/2026

In short

CVE-2025-61886 is a MEDIUM (CVSS 5.4) vulnerability affecting fortisandbox (fortinet), fortisandbox cloud (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.9% of all vulnerabilities.
Fix: update to 5.0.5 or later.

Package	Affected versions	Patched versions
fortisandbox fortinet	`≥ 5.0.0, < 5.0.5`	`5.0.5`
fortisandbox cloud fortinet	`= 5.0.4`	No fix yet

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox PaaS 5.0.0 through 5.0.4 may allow an attacker to perform an XSS attack via crafted HTTP requests.

References

fortiguard.fortinet.com/psirt/FG-IR-26-109 · Vendor Advisory

More vulnerabilities in fortisandbox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortisandbox

fortinet

≥ 5.0.0, < 5.0.5

5.0.5

fortisandbox cloud

fortinet

= 5.0.4

No fix yet

More vulnerabilities in fortisandbox

See all →