CVE-2025-61886

CVSS 3.1: 5.4 medium
EPSS: <1%p20
Published: Apr 14, 2026 · Apr 14, 2026
Modified: Oct 14, 2026

Analyze CVE-2025-61886 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox PaaS 5.0.0 through 5.0.4 may allow an attacker to perform an XSS attack via crafted HTTP requests.

Vendors: fortinet

Products: fortisandbox, fortisandbox cloud

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808)

Help Net SecurityApr 16, 00:00 UTC · Apr 16, 2026VulnerabilityCVE-2026-39813 CVE-2026-39808 CVE-2025-61886+22 · 1 read