Vulnerability Bulletins

CVE-2026-25836

   
Affected software FORTINET
 
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-25836