VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.01

ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-84387.

Číst originál na Zero Day Initiative →

2 zprávy z 2 zdrojů · první · zachyceno CZ · EN/orig

Fortinet US FI

tg: zranitelnost

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-84387 6.7 3.1 · fortinet – 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.2.

Jak se o tom psalo 2

  1. · zachyceno · Zero Day Initiative US nadpis události

    ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-84387.

  2. · zachyceno · NCSC-FI FI

    FortiSandbox Cron Job Injection in Remote Backup

    Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.7, CVEs: CVE-2026-84387, Summary: An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] in FortiSandbox may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.