A ready-made attack for a flaw in Fortinet FortiSandbox is now public
KROMSE explanation
Fortinet FortiSandbox has a security flaw (CVE-2026-39813, CVSS 9.1). The official record says: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.
Not confirmed yet, but attack code is public, so attacks often follow within days.
Anyone running Fortinet FortiSandbox.
- Install the maker's update for Fortinet FortiSandbox as soon as it is out.
- Not sure if you use it? KROMSE can check your product for free.
