CVE-2026-39813

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.5 FortiSandbox versions 4.4.0 through 4.4.8

Description A path traversal issue exists where specially crafted HTTP requests can be used to bypass restricted directory access. This flaw allows a remote attacker to achieve escalation of privilege. Compromised systems can be used to approve malicious files as clean for dependent products or serve as a pivot for lateral movement within enterprise networks. Real-world attack telemetry confirms that this issue is being actively exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.