CVE-2026-25836

概要

参考情報

• fortiguard.fortinet.com/psirt/FG-IR-26-096 · Vendor Advisory

fortisandbox cloud のその他の脆弱性

• CVE-2026-25089緊急 9.8悪用確認済み（CISA KEV）A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th…
• CVE-2026-26083緊急 9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0…
• CVE-2026-39812中 4.8A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through …
• CVE-2026-27316低 2.7A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandb…
• CVE-2026-25691中 6.7A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…