MEDIUM

Cron Job Injection in Remote Backup

Fortinet PSIRT • Sep 08, 2026

CRITICAL

Three critical FortiSandbox bugs rated 9.8 actively exploited

SC Media • Jun 16, 2026

CRITICAL

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

The Hacker News • Jun 16, 2026

HIGH

Second-Order OS Command Injection via JSON Input on start vnc feature

Fortinet PSIRT • Jun 09, 2026

HIGH

NCSC-2026-0155 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiSandbox

NCSC Netherlands • May 13, 2026

HIGH

Incorrect global authorization

Fortinet PSIRT • May 12, 2026

CRITICAL

[NEU] [hoch] Fortinet FortiSandbox: Mehrere Schwachstellen

BSI Germany • Apr 15, 2026

MEDIUM

Multiple Stored XSS

Fortinet PSIRT • Apr 14, 2026

CRITICAL

OS Command Injection through API endpoint

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Reflected XSS in Operation Center

Fortinet PSIRT • Apr 14, 2026

MEDIUM

XSS in LDAP server option

Fortinet PSIRT • Mar 10, 2026

CRITICAL

CVE-2025-52436: Fortinet FortiSandbox XSS Vulnerability

Web Discovery • Feb 10, 2026

HIGH

NVD - CVE-2025-52436

Web Discovery • Feb 10, 2026

HIGH

CVE-2025-52436 - Fortinet FortiSandbox Cross-Site Scripting Vulnerability

Web Discovery • Feb 10, 2026

MEDIUM

NCSC-2026-0060 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSandbox, FortiAuthenticator en FortiClient

NCSC Netherlands • Feb 11, 2026

MEDIUM

[NEU] [hoch] Fortinet FortiSandbox: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Feb 11, 2026