Home / Vulnerability Intelligence / CVE-2026-39813

CVE-2026-39813 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 14, 2026

Fortinet FortiSandbox - Path Traversal

Published: April 14, 2026Updated: April 14, 2026Remote Exploitable

Overview

Fortinet FortiSandbox 5.0.0 through 5.0.5 and 4.4.0 through 4.4.8 contain a path traversal caused by improper input validation, letting attackers escalate privileges via crafted path traversal, exploit requires attacker to send crafted requests.

Severity & Score

Severity: Critical

CVSS Score: 9.8

Impact

Attackers can escalate privileges by exploiting path traversal to access unauthorized files or system components.

Mitigation

Update to the latest FortiSandbox version beyond 5.0.5 or 4.4.8.

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-112

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-39813
Severity: Critical
CVSS Score: 9.8
Type: path_traversal
Status: new

CWE

CWE-24

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H