CVE-2024-52961 — An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests

Back Back to CVE browser

HIGH

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests

Published Mar 11, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.54%

Description

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests.

Affected products

Vendor Fortinet Product FortiSandbox Default
unaffected
- Version
  3.0.0
  Status
  affected
  Constraints
  <=3.0.7
- Version
  3.1.0
  Status
  affected
  Constraints
  <=3.1.5
- Version
  3.2.0
  Status
  affected
  Constraints
  <=3.2.4
- Version
  4.0.0
  Status
  affected
  Constraints
  <=4.0.5
- Version
  4.2.1
  Status
  affected
  Constraints
  <=4.2.7
- Version
  4.4.0
  Status
  affected
  Constraints
  <=4.4.6
- Version
  5.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fortinet

FortiSandbox

unaffected

Version	Status	Constraints
3.0.0	affected	<=3.0.7
3.1.0	affected	<=3.1.5
3.2.0	affected	<=3.2.4
4.0.0	affected	<=4.0.5
4.2.1	affected	<=4.2.7
4.4.0	affected	<=4.4.6
5.0.0	affected	-

Remediation

Vendor solution

Fortinet remediated this issue in FortiSandbox Cloud version 24.2 (not released) and hence customers do not need to perform any action. Upgrade to FortiSandbox version 5.0.1 or above Upgrade to FortiSandbox version 4.4.7 or above Upgrade to FortiSandbox version 4.2.8 or above Upgrade to FortiSandbox version 4.0.6 or above

Metrics

0.54% 0.00537

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00537

Score over time

2025–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (4 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.54% (0.00537)	43.17th	v5 (v2026.06.15)
Jun 15, 2026	0.48% (0.00477)	37.25th	v5 (v2026.06.15)
Mar 17, 2025	0.06% (0.00062)	16.72th	v4 (v2025.03.14)
Mar 12, 2025	0.04% (0.00043)	12.22th	v3 (v2023.03.01)