CVE-2024-31491: Fortinet FortiSandbox

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.

Affected products

• Fortinet FortiSandbox: from 4.2.0, before 4.2.7 (fixed in 4.2.7); from 4.4.0, before 4.4.5 (fixed in 4.4.5)

Published 2024-05-14. Last modified 2026-06-17.