← Back to browse · API

CVE-2026-39813

Severity
CRITICAL
CVSS
9.1
EPSS
0.2306
Risk score
44.47
CISA KEV
No
PoC
Yes
Published
2026-04-14
Modified
2026-06-18
First seen
2026-08-07
Aliases
EUVD-2026-22344, GHSA-5F64-P6CF-VVQG
Products
Fortinet:FortiSandbox 4.4.0 ≤4.4.8, Fortinet:FortiSandbox 5.0.0 ≤5.0.5, Fortinet:FortiSandbox Cloud 23.4, Fortinet:FortiSandbox Cloud 24.1, Fortinet:FortiSandbox Cloud 5.0.4 ≤5.0.5
Sources
packetstorm 18b1e535882ca5023849a190|CVE-2026-39813
euvd EUVD-2026-22344

Description

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.

References