Class familyFortinet · FortiSandbox
Fortinet FortiSandbox OS command injection flaws, 2024–2026
10 FortiSandbox CVEs with CWE-78 weaknesses, 9 Apr 2024 to 9 Jun 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2024’24
5 2025’25
2 2026’26
In CISA KEVNot in KEV
20243 CVEs
20255 CVEs
20262 CVEs, 2 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-47540 | 9 Apr 2024 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in… | Grouped by weakness | 14.6 |
| CVE-2024-21755 | 9 Apr 2024 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… | Grouped by weakness | 22.9 |
| CVE-2024-21756 | 9 Apr 2024 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… | Grouped by weakness | 22.5 |
| CVE-2024-27778 | 14 Jan 2025 | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet… | Grouped by weakness | 15.3 |
| CVE-2024-52961 | 11 Mar 2025 | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet… | Grouped by weakness | 15.2 |
| CVE-2024-54018 | 11 Mar 2025 | Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox… | Grouped by weakness | 23.7 |
| CVE-2025-53679 | 9 Dec 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… | Grouped by weakness | 24.1 |
| CVE-2025-53949 | 9 Dec 2025 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78]… | Grouped by weakness | 24.3 |
| CVE-2026-39808KEV | 14 Apr 2026 | Fortinet FortiSandbox OS Command Injection Vulnerability | Grouped by weakness | 78.7 |
| CVE-2026-25089KEV | 9 Jun 2026 | Fortinet FortiSandbox OS Command Injection Vulnerability | Grouped by weakness | 74.8 |