CVE-2025-67685

LOW 3.8CVE-2025-67685 · Published 13/01/2026 · updated 17/06/2026

In short

CVE-2025-67685 is a LOW (CVSS 3.8) vulnerability affecting fortisandbox (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.6% of all vulnerabilities.
Fix: update to 5.0.5 or later.

Package	Affected versions	Patched versions
fortisandbox fortinet	`≥ 4.0.0, < 5.0.5`	`5.0.5`

Description

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests.

References

fortiguard.fortinet.com/psirt/FG-IR-25-783 · Vendor Advisory

More vulnerabilities in fortisandbox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortisandbox

fortinet

≥ 4.0.0, < 5.0.5

5.0.5

Description

More vulnerabilities in fortisandbox

See all →