https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:01:57.704135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01616 bdu:2025-01616 2026-10-06T14:01:57.708903+00:00 bdu:2025-01616 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0120 certfr-2025-avi-0120 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… 2026-10-06T14:01:57.708934+00:00 certfr-2025-avi-0120 https://cve.radiocsirt.org/vuln/euvd-2026-273372 EUVD-2026-273372 2026-10-06T14:01:57.708953+00:00 EUVD-2026-273372 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27781 fkie_cve-2024-27781 2026-10-06T14:01:57.708964+00:00

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-cg8r-2vc3-jvc7 GHSA-cg8r-2vc3-jvc7 2026-10-06T14:01:57.708992+00:00

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox at least versions 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/gsd-2024-27781 gsd-2024-27781 2026-10-06T14:01:57.709008+00:00 gsd-2024-27781 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0347 WID-SEC-W-2025-0347 — Fortinet FortiSandbox: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-06T14:01:57.709019+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Fortinet FortiSandbox ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.