CVE-2026-39813 — Fortinet / FortiSandbox

CVE-2026-39813

Fortinet / FortiSandbox PUBLISHED

Description (CNA)

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox	affected 5.0.0 through 5.0.5; affected 4.4.0 through 4.4.8
Fortinet / FortiSandbox Cloud	affected 24.1; affected 23.4; affected 5.0.4 through 5.0.5

CWE

CWE-24

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-112

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.