Dashboard / CVE-2026-39813

CVE-2026-39813

CRITICAL
HIGH Priority: 2.18 BB Relevance: 84/100
Published: 2026-04-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
fortinet fortisandbox 4.4.0 – 4.4.9
fortinet fortisandbox 5.0.0 – 5.0.6

References & Advisories (1)

Bug Bounty Relevance

84 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

22.22%
Raw Score 0.222240
Percentile 97.7%
Date 2026-10-28

Intelligence Sources

nvd ref →

External Links