CVE-2026-84387

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 6.7EPSS 1%

Published 2026-09-08Updated 2026-09-08

Vulnerability details

A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CNAfortinet

EPSS score history

Sources

1 links

PoC links are not available for guest users. Login to view them.

CVE Organization

Profile

CVSS

6.7

EPSS

Published

2026-09-08

Updated

2026-09-08

CNA

fortinet

Vendors

Fortinet

1 product

CPEs

cpe:2.3:a:fortinet:fortisandbox:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated