CVE-2026-39808

Fortinet FortiSandbox Vulnerability

Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

CVSS Score

9.8

CRITICAL

Published

16 Jul 2026 00:00

Modified

N/A

Vendor

Fortinet

Product

FortiSandbox

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-78

References

nvd.nist.gov /vuln/detail/CVE-2026-39808 cve.circl.lu /cve/CVE-2026-39808 cve.mitre.org /cgi-bin/cvename.cgi vuldb.com /

Affected Systems

Fortinet

FortiSandbox

Fortinet

FortiOS

FortiSandbox

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability