high7.2
CVE-2026-84387
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, For…
Impact
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 | through 5.0.6 |
| FortiSandbox 4.4.0 | through 4.4.9 |
Versions were read from the advisory text. No structured product data has been published for this record yet.