CVE-2026-25691

MEDIUM EPSS 36.3%

Published Apr 14, 20262mo ago · Modified Jun 17, 20261w ago

6.7 CVSS 3.1

Medium

Published Apr 14, 2026 2mo ago

Last Modified Jun 17, 2026 1w ago

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to delete an arbitrary directory via HTTP crafted requests.

CVSS Details

Base Score

6.7

Exploitability

1.2

Impact

5.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

36.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 3

Vendor	Product	Version	Range
fortinet	fortisandbox	*	≥4.2.0 – <4.4.9
fortinet	fortisandbox	*	≥5.0.0 – <5.0.6
fortinet	fortisandbox_cloud	5.0.4	any

References 1

fortiguard.fortinet.com https://fortiguard.fortinet.com/psirt/FG-IR-26-115

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.