CVE-2025-67685

3.8 lowEPSS 0.4%

Low (3.8) in fortinet fortisandbox. EPSS 0.4% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests.

Severity

CVSS 3.1

3.8 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2026-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortisandbox

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-783

Check your stack JSON