What’s Vulnerable › Vulnerabilities
CVE-2026-84387
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-08 · updated 2026-10-29
- Weakness: CWE-77
Description
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.
Affected products
- Fortinet FortiSandbox: from 5.0.0 through 5.0.6; from 4.4.0 through 4.4.9; from 4.2.1 through 4.2.8; 5.2.0
References
Get alerted when CVE-2026-84387 or the next vulnerability affects your stack