CVE-2026-25836 | Fortinet FortiSandbox Cloud 5.0.4 HTTP Request os command injection (FG-IR-26-096)

March 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Fortinet FortiSandbox Cloud 5.0.4. Impacted is an unknown function of the component HTTP Request Handler. This manipulation causes os command injection.

This vulnerability appears as CVE-2026-25836. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More