Critical FortiSandbox Vulnerabilities Allows Attackers to Execute Unauthorized Commands

Cybersecuritynews •Guru Baran • April 14, 2026

Fortinet has disclosed two critical security vulnerabilities affecting its FortiSandbox platform, both carrying a CVSSv3 score of 9.1. The flaws, published on April 14, 2026, could allow unauthenticated remote attackers to execute arbitrary commands and bypass authentication entirely, posing a serious risk to enterprise environments relying on FortiSandbox for advanced threat detection. OS Command Injection […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Issues Security Advisory for Critical Vulnerabilities On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote unauthenticated attackers to execute unauthorized commands. The vulnerabilities affect enterprise network management environments, posing significant risks to users of the affected Fortinet products. 71 sources 72

Extracted Entities

Critical FortiSandbox Vulnerabilities Allows Attackers to Execute Unauthorized Commands

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)