Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiSandbox
EPSS: 0.932 (99.8th percentile, 2026-10-30)
FortiSandbox is affected by an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-07-16.
Reviewed by PerimeterClock.
| Date | Event | Source |
|---|---|---|
| 2026-07-16 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.