FortiSandbox XSS Vulnerability Allows Remote Command Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Discloses XSS Vulnerability in FortiSandbox Platform Fortinet has announced a high-severity cross-site scripting (XSS) vulnerability in its FortiSandbox platform, identified as CVE-2025-52436. This flaw allows unauthenticated attackers to execute arbitrary commands on affected systems through the graphical user interface (GUI), with a CVSS score of 7.9. Organizations using FortiSandbox should assess their systems for this vulnerability. 2 sources 38