Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026041504043737 | Publication Time | 2026/04/15 16:21 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026/04/15 16:21 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】A Critical Security Vulnerability Has Been Identified in Fortinet FortiSandbox (CVE-2026-39808) |
|||
| [Content] Forwarded from TWCERTCC-200-202604-00000011 FortiSandbox is a threat protection solution under Fortinet that can perform dynamic analysis to identify previously unknown cyber threats. Fortinet has disclosed a critical security vulnerability in FortiSandbox (CVE-2026-39808, CVSS: 9.8). This is an operating system command injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands through specially crafted HTTP requests. (Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform]
FortiSandbox versions 4.4.0 through 4.4.8 inclusive |
|||
| [Recommended Actions]
Please update to FortiSandbox version 4.4.9 or later. |
|||
| [Reference] https://www.twcert.org.tw/tw/cp-169-10837-5fade-1.html |
|||