What is the CVSS score of CVE-2025-52436?

CVE-2025-52436 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Fortisandbox are affected by CVE-2025-52436?

A critical cross-site scripting vulnerability in Fortinet FortiSandbox (versions 4.0 through 5.0.1) allows unauthenticated attackers to execute arbitrary commands, potentially compromising malware…

How to fix or mitigate CVE-2025-52436?

Within 24 hours: Inventory all FortiSandbox deployments and confirm affected versions (4.0, 4.2, 4.4.0-4.4.7, 5.0.0-5.0.1); isolate or restrict network access to affected instances. Within 7 days: Implement network segmentation to limit FortiSandbox access to trusted administrative networks only; deploy WAF rules blocking XSS patterns on management interfaces; enable detailed logging and conduct threat hunting for exploitation indicators. Within 30 days: Upgrade to FortiSandbox 5.0.2+ or later when available; evaluate alternative sandbox solutions if upgrade timelines exceed acceptable risk windows.

Fortisandbox CVE-2025-52436

HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-02-10 psirt@fortinet.com

Fortinet XSS Fortisandbox

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 16:16 nvd

HIGH 8.8

DescriptionCVE.org

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.

AnalysisAI

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Affects Fortisandbox. An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.