Fortinet FortiSandbox OS Command Injection Vulnerability

概要

参考情報

• fortiguard.fortinet.com/psirt/FG-IR-26-100 · Vendor Advisory
• samu-delucas/CVE-2026-39808 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-39808

fortisandbox のその他の脆弱性

• CVE-2026-59835高 8.6A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allo…
• CVE-2026-25089緊急 9.8悪用確認済み（CISA KEV）A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th…
• CVE-2026-26083緊急 9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0…
• CVE-2026-39813緊急 9.8A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attack…
• CVE-2026-39812中 4.8A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through …