# Fortinet Fortisandbox


- [CVE-2026-25089](https://insights.sbomify.com/CVE-2026-25089/): Fortinet FortiSandbox OS Command Injection (critical 9.1, exploited in the wild)
- [CVE-2026-39808](https://insights.sbomify.com/CVE-2026-39808/): Fortinet FortiSandbox OS Command Injection (critical 9.1, exploited in the wild)
- [CVE-2026-26083](https://insights.sbomify.com/CVE-2026-26083/): Missing authorization in FortiSandbox (critical 9.1)
- [CVE-2026-39813](https://insights.sbomify.com/CVE-2026-39813/): Path traversal in FortiSandbox (critical 9.1)
- [CVE-2020-29011](https://insights.sbomify.com/CVE-2020-29011/): SQL injection in Fortinet FortiSandbox (high 8.8)
- [CVE-2021-26097](https://insights.sbomify.com/CVE-2021-26097/): Command injection in Fortinet FortiSandbox (high 8.8)
- [CVE-2024-52961](https://insights.sbomify.com/CVE-2024-52961/): Command injection in FortiSandbox (high 8.6)
- [CVE-2024-31491](https://insights.sbomify.com/CVE-2024-31491/): Code injection in FortiSandbox (high 8.6)
- [CVE-2024-21755](https://insights.sbomify.com/CVE-2024-21755/): Command injection in FortiSandbox (high 8.6)
- [CVE-2024-21756](https://insights.sbomify.com/CVE-2024-21756/): Command injection in FortiSandbox (high 8.6)
- [CVE-2024-27778](https://insights.sbomify.com/CVE-2024-27778/): Command injection in FortiSandbox (high 8.3)
- [CVE-2022-27487](https://insights.sbomify.com/CVE-2022-27487/): Missing authorization in FortiDeceptor (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/products/fortinet/fortisandbox/