CVE-2026-39808

The repository provides a functional PoC for CVE-2026-39808, demonstrating an unauthenticated RCE vulnerability in Fortinet FortiSandbox via command injection in the `jid` parameter of the `/fortisandbox/job-detail/tracer-behavior` endpoint. The exploit uses a simple curl command to inject OS commands via the pipe symbol.

This repository contains a functional Python exploit for CVE-2026-39808, an unauthenticated OS command injection vulnerability in Fortinet FortiSandbox. The exploit leverages the `/fortisandbox/job-detail/tracer-behavior` endpoint with an unsanitized `jid` parameter to execute arbitrary commands as root.

The repository claims to provide a PoC for CVE-2026-39808 but only contains a placeholder script that redirects users to an external GitLab link. No actual exploit code is present, and the README includes vague marketing language without technical depth.

This repository contains a functional Python exploit for CVE-2026-39808, an OS command injection vulnerability in Fortinet FortiSandbox versions 4.4.0-4.4.8. The exploit leverages improper input sanitization in the tracer-behavior endpoint to execute arbitrary commands via crafted HTTP requests.

The repository lacks actual exploit code or technical details about CVE-2026-39808, instead providing generic setup instructions and a script to download external content. The README is filled with disclaimers and ethical use statements but no substantive vulnerability analysis.

The repository provides a functional PoC for CVE-2026-39808, an unauthenticated RCE vulnerability in FortiSandbox. The exploit leverages command injection via the `jid` parameter in the `/fortisandbox/job-detail/tracer-behavior` endpoint using the pipe symbol (`|`).

This repository contains a functional exploit PoC for CVE-2026-39808, demonstrating an unauthenticated OS command injection vulnerability in Fortinet FortiSandbox. The exploit chains CVE-2026-39813 (authentication bypass) with CVE-2026-39808 (command injection) to achieve root-level remote code execution.

The repository provides a functional proof-of-concept for CVE-2026-39808, demonstrating an unauthenticated command injection vulnerability in Fortinet's FortiSandbox via the `jid` parameter in the `/fortisandbox/job-detail/tracer-behavior` endpoint. The PoC uses a simple curl command to achieve remote code execution as root.

The repository claims to provide an exploit for CVE-2026-39808 but only contains a README with vague details and external download links. No actual exploit code is present, and the focus is on directing users to external sources.