Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2021-26096

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

  • Published: Aug 4, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-26096
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
fortinet / fortisandbox - 3.1.4.x
fortinet / fortisandbox 3.2.0 3.2.3