CVE-2021-26096: Fortinet FortiSandbox

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

Affected products

• Fortinet FortiSandbox: up to and including 3.1.4; from 3.2.0, before 3.2.3 (fixed in 3.2.3)

Published 2021-08-04. Last modified 2026-06-17.