VULNERABILITY INTELLIGENCE

CVE-2021-26096

CVSS score6.4 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2021-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Description

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references