PT-2026-32692 · Fortinet · Fortisandbox

Published 2026-04-14 · Updated 2026-04-16 · CVE-2026-39813

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 4.4.0 through 4.4.8 FortiSandbox versions 5.0.0 through 5.0.5

Description A path traversal issue involving '../filedir' may allow an attacker to achieve escalation of privilege.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-24

Related Identifiers

CVE-2026-39813

Affected Products

Fortisandbox

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-39813 · Security Note
• https://twitter.com/HunterMapping/status/2044701233294754122 · Twitter Post
• https://twitter.com/JadenJohnsNews/status/2044438986643390874 · Twitter Post
• https://twitter.com/CCBalert/status/2044428777053106414 · Twitter Post
• https://fortiguard.fortinet.com/psirt/FG-IR-26-112 · Note
• https://twitter.com/rxerium/status/2044163713457143865 · Twitter Post
• https://twitter.com/VivekIntel/status/2044520969868611794 · Twitter Post
• https://twitter.com/ptdbugs/status/2044120792619758075 · Twitter Post
• https://twitter.com/threatcluster/status/2044455313508634869 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2044371961220825598 · Twitter Post