CVE-2025-46215

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 18, 2025

CISA due date

—

The record

An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file.

Affected packages

Ecosystem	Package	Introduced	Fixed