Cross-Site Scripting Vulnerability in Fortinet FortiSandbox Products
CVE-2025-53608

4.6MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortisandbox
Vendor
CVE Published:
10 March 2026

What is CVE-2025-53608?

The vulnerability in Fortinet FortiSandbox allows authenticated privileged attackers to exploit improper input neutrality during web page generation. By crafting specific requests, these attackers can execute arbitrary code, potentially compromising the integrity and confidentiality of affected systems. It is critical for organizations utilizing FortiSandbox to implement appropriate security measures to mitigate this risk and safeguard their web applications.

Affected Version(s)

FortiSandbox 5.0.0 <= 5.0.2

FortiSandbox 4.4.0 <= 4.4.7

FortiSandbox 4.2.1 <= 4.2.8

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-091

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.