Fortisandbox — PoC Archivehttps://poc.intelseclab.com/tags/fortisandbox/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000FortiSandbox 4.4.0-4.4.8 — OS Command Injection via tracer-behavior Endpoint (CVE-2026-39808)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-39808-fortisandbox-os-command-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-39808-fortisandbox-os-command-injection/Critical severity (CVSS 9.8) — network · CVE-2026-39808. Status: Weaponized — real, working exploit verified from two independent sources. Affects: Fortinet FortiSandbox. Tags: fortinet, fortisandbox, os-command-injection, unauthenticated, root-rce, cwe-78, actively-exploited, kev.networkCriticalfortinetfortisandboxos-command-injectionunauthenticatedroot-rcecwe-78actively-exploitedkevFortinet FortiSandbox "Start VNC" OS Command Injection (CVE-2026-25089)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25089-fortisandbox-cmd-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25089-fortisandbox-cmd-injection/Critical severity (CVSS 9.8) — network · CVE-2026-25089. Status: PoC. Affects: Fortinet FortiSandbox (Web UI "start VNC" feature). Tags: fortisandbox, fortinet, command-injection, cwe-78, unauthenticated, rce, appliance, network.networkCriticalfortisandboxfortinetcommand-injectioncwe-78unauthenticatedrceappliancenetwork