Fortinet FortiSandbox Critical Vulnerabilities CVSS 9.8 Remote Attack

CERT-Bund disclosed multiple critical vulnerabilities in Fortinet FortiSandbox appliances (CVSS Base Score 9.8). The flaws enable remote attackers to perform cross-site scripting, information disclosure, security bypass, and arbitrary code execution attacks. Organizations running affected FortiSandbox versions below 5.0.5 (v5.x) and below 4.4.9 (v4.x) must apply patches immediately to prevent exploitation. This is a high-priority security advisory requiring urgent attention from IT security teams responsible for network infrastructure.

Affected parties include organizations using Fortinet FortiSandbox for advanced threat detection. Immediate actions include updating to secure versions (5.0.5+ or 4.4.9+), reviewing CVE details, and implementing available mitigations. The temporal score of 8.5 indicates high exploitability likelihood, making this a priority remediation item for security operations teams.