Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026041504041818 | Publication Time | 2026/04/15 16:24 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026/04/15 16:24 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】A Critical Security Vulnerability Has Been Identified in the Fortinet FortiSandbox JRPC API (CVE-2026-39813) |
|||
| [Content] Forwarded from TWCERTCC-200-202604-00000012 Fortinet has disclosed a critical security vulnerability in the FortiSandbox JRPC API (CVE-2026-39813, CVSS: 9.8). This is a path traversal vulnerability that may allow an unauthenticated attacker to bypass authentication through specially crafted HTTP requests. (Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform]
FortiSandbox versions 4.4.0 through 4.4.8 inclusive |
|||
| [Recommended Actions]
Please update to the following versions: FortiSandbox version 4.4.9 or later, and FortiSandbox version 5.0.6 or later. |
|||
| [Reference] https://wwwtwcert.org.tw/tw/cp-169-10838-99d85-1.html |
|||