PT-2026-2488 · Fortinet · Fortisandbox

Published 2026-01-13 · Updated 2026-02-04 · CVE-2025-67685

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiSandbox versions 4.0 through 5.0.4 Fortinet FortiSandbox version 4.4 Fortinet FortiSandbox version 4.2

Description An authenticated attacker may be able to proxy internal requests limited to plaintext endpoints only by sending specially crafted HTTP requests. This is a Server-Side Request Forgery (SSRF) issue.

Recommendations Fortinet FortiSandbox versions prior to 5.0.5 should be updated. Fortinet FortiSandbox version 4.4 should be updated. Fortinet FortiSandbox version 4.2 should be updated.

Fix

RCE

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-00508

CVE-2025-67685

ZDI-26-048

Affected Products

Fortisandbox

References · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-25-783 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00508 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-67685 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67685 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-26-048 · Security Note
• https://fortiguard.com/psirt/FG-IR-25-783 · Note
• https://twitter.com/CVEnew/status/2011120640753873392 · Twitter Post
• https://twitter.com/TheZDIBugs/status/2019122006491386310 · Twitter Post