CVE-2026-39808
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
- CVSS 3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 93% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-26)
- CISA KEV
- listed 2026-07-16, due 2026-07-19
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fortinet:fortisandbox