Multiple critical vulnerabilities were discovered in Fortinet FortiSandbox that allow attackers to bypass authentication mechanisms or execute arbitrary code or commands through specially crafted HTTP requests. These vulnerabilities could be exploited to gain unauthorized access or control over the affected FortiSandbox devices. Fortinet has issued patches to fix these security flaws.

Successful exploitation of these vulnerabilities could lead to unauthorized access to FortiSandbox devices or remote code execution, potentially compromising the confidentiality, integrity, and availability of the affected systems. No known exploits in the wild have been reported at this time.

Fortinet has released patches to address these critical vulnerabilities in FortiSandbox. Users should apply the official patches promptly to mitigate the risk. Since this is not a cloud service, remediation depends on deploying the vendor's updates to affected on-premises devices. Patch status is confirmed by the vendor's advisory as fixed.