A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.

This vulnerability affecting Fortinet's FortiSandbox has been reportedly exploited in the wild. Immediate patching is recommended

The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9 or 5.0.x prior to 5.0.6.
It is, therefore, affected by multiple vulnerabilities:

  - An OS command injection vulnerability may allow an unauthenticated attacker to execute unauthorized commands     via specifically crafted HTTP requests. (CVE-2026-25089)

  - A path traversal vulnerability may allow an attacker to escalate privileges. (CVE-2026-39813)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

FortiSandbox version 4.4.x prior to 4.4.9 or 5.0.x prior to 5.0.6 are affected by a path traversal vulnerability. An attacker could exploit this vulnerability to gain unauthorized access to files and directories on the system, potentially leading to privilege escalation.

ID	Name	Product	Family	Severity
324963	Fortinet FortiSandbox 4.4.x < 4.4.9 / 5.0.x < 5.0.6 Multiple Vulnerabilities	Nessus	Misc.	critical
115268	FortiSandbox 4.4.x < 4.4.9 / 5.0.x < 5.0.6 Path Traversal	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2026-39813

critical

Tenable Plugins

critical

critical