CVE-2026-25836 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a pr…
High CVSS: 7.2

CVE-2026-25836

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests.
Vendor
Fortinet
Product
Fortisandbox Cloud
CWE
CWE-78
Yayın Tarihi
2026-03-10 18:18:38
Güncelleme
2026-03-18 13:04:12
Source Identifier
psirt@fortinet.com
KEV Date Added
-

Kategoriler

Referanslar