CVE-2026-39813
CRITICAL 9.8EPSS 0.7%
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
- Affected
- Fortinet · FortiSandbox · FortiSandbox Cloud
- CVSS v3.1 FORTINET
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.72% chance of exploitation in the next 30 days, 53rd percentile
- Published
- 2026-04-14
- Updated
- 2026-06-18
Proof-of-concept exploits (2)
- 0xBlackash/CVE-2026-398130★ · 2026-04-23
- HORKimhab/CVE-2026-398130★ · 2026-06-17