CVE-2024-54018: Fortinet FortiSandbox

High severity, CVSS 7.2. EPSS: 10% chance of exploitation in the next 30 days.

Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorized commands via crafted requests.

Affected products

• Fortinet FortiSandbox: from 3.2.0, before 4.4.6 (fixed in 4.4.6)

Published 2025-03-11. Last modified 2026-06-17.