https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:41:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04851 bdu:2026-04851 https://cve.radiocsirt.org/vuln/bdu:2026-04851 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1084 certfr-2025-avi-1084 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1084 https://cve.radiocsirt.org/vuln/euvd-2026-271384 EUVD-2026-271384 https://cve.radiocsirt.org/vuln/euvd-2026-271384 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53949 <p>An Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.</p> <p>An Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53949 https://cve.radiocsirt.org/vuln/ghsa-g5pp-f223-r98m <p>An Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.</p> <p>An Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.</p> https://cve.radiocsirt.org/vuln/ghsa-g5pp-f223-r98m https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2791 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um beliebigen Programmcode auszuführen oder einen Cross Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um beliebigen Programmcode auszuführen oder einen Cross Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2791