CVE-2021-26105CWE-358

A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an…

Medium · published March 24, 2025

CVSS v3.1
6.4
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.1th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2025-03-24T15:27Z
EPSS history
Timeline
  • 24 MAR 15:27Z
    A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an…
    cvelistv5