CVE-2021-26096

MEDIUM

FortiSandbox < 4.0.0 - Authenticated Heap-Based Buffer Overflow via Command Shell Arguments

Title source: llm

Description

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://fortiguard.com/advisory/FG-IR-20-188

Scores

CVSS v3 6.4

EPSS 0.0053

EPSS Percentile 67.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (1)

fortinet/fortisandbox < 3.1.4

Published Aug 04, 2021

Tracked Since Feb 18, 2026