Back www.fortiguard.com

FG IR 26 100

www.fortiguard.com • April 16, 2026

An Improper Neutralization of Special Elements used in an OS Command ('OS command injection') vulnerability [CWE-78] in FortiSandbox may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

FortiSanbox PaaS 5.0 is not impacted by the issue and hence customers do not need to perform any action.

2026-04-14: Initial publication

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Issues Security Advisory for Critical Vulnerabilities On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote unauthenticated attackers to execute unauthorized commands. The vulnerabilities affect enterprise network management environments, posing significant risks to users of the affected Fortinet products. 71 sources 72

Extracted Entities

FG IR 26 100

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Vulnerabilities (1)