Required actionApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
KEV: Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
NVD: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
warncomponent_extraction: Component 'FortiSandbox API endpoint' matches or contains product name 'FortiSandbox' — no specific component identified
Hunting hypothesis agent
Monitor for unauthenticated HTTP requests to FortiSandbox API (/fortisandbox) with command injection payload patterns in request bodies or parameters.
Research details
ComponentFortiSandbox API endpoint
PreconditionsNetwork reachability to FortiSandbox API endpoint (port 443/HTTP management interface) — no authentication required. The OS command injection (CWE-78) exists in FortiSandbox API endpoints in versions 4.4.0 through 4.4.8. FortiGuard advisory FG-IR-26-100 (April 14, 2026). Patched version: 4.4.9. Multiple public PoCs available (samu-delucas, 0xBlackash, ynsmroztas). The API endpoint is available by default as part of the FortiSandbox management interface. Exploitation allows root-level command execution and full sandbox escape. CISA added to KEV on 2026-07-16. agent
DeliveryHTTP requests to FortiSandbox API endpoint; specially crafted request triggers OS command injection in the API handler. No authentication required.
Exploit notesCVSS attack complexity: LOW | CRITICAL severity (CVSS 9.8) | Multiple public PoCs available (3 repos) | Unauthenticated remote command injection via API endpoint | Low complexity — requires only network access. FortiGuard advisory FG-IR-26-100. PoC exploit articles published by Cyberpress and SentinelOne. Qualys ThreatPROTECT notes active exploitation alongside CVE-2026-25089 and CVE-2026-39813.
SummaryCritical (CVSS 9.8) unauthenticated OS command injection in Fortinet FortiSandbox API endpoint (4.4.0-4.4.8). Three public PoC repos available (ynsmroztas, samu-delucas, 0xBlackash). Root-level RCE and sandbox escape. Actively exploited in the wild. Patch: FortiSandbox 4.4.9.
Tia coverage
First reported2026-06-16
First exploit report2026-06-16
Exploit report → KEV30 days before the listing
When Tia's reporting first covered this CVE and whether a report claimed exploitation before the KEV listing. Lead-time deltas are measured from the exploitation report only — plain coverage is not exploitation intel. See the story links under Mentioned in for coverage detail.