{"resultsPerPage":10,"startIndex":0,"totalResults":10,"format":"NVD_CVEHistory","version":"2.0","timestamp":"2026-11-05T02:22:01.127","cveChanges":[{"change":{"cveId":"CVE-2026-39808","eventName":"New CVE Received","cveChangeId":"11167C6D-1FC5-483F-B774-64A8043804F4","sourceIdentifier":"psirt@fortinet.com","created":"2026-04-14T16:16:44.860","details":[{"action":"Added","type":"Description","newValue":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"action":"Added","type":"CVSS V3.1","newValue":"AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H"},{"action":"Added","type":"CWE","newValue":"CWE-78"},{"action":"Added","type":"Reference","newValue":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-100"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"Initial Analysis","cveChangeId":"AC3F7702-7A22-40C6-AAF5-E173CD0810C6","sourceIdentifier":"nvd@nist.gov","created":"2026-04-20T19:11:59.507","details":[{"action":"Added","type":"CPE Configuration","newValue":"OR\n          *cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:* versions from (including) 4.4.0 up to (including) 4.4.9"},{"action":"Added","type":"Reference Type","newValue":"Fortinet, Inc.: https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-100 Types: Vendor Advisory"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Modified","cveChangeId":"2AC3E935-A328-4E93-AD56-CC37C0D044CE","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-04-22T14:17:00.873","details":[{"action":"Added","type":"Reference","newValue":"https:\/\/github.com\/samu-delucas\/CVE-2026-39808"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Modified","cveChangeId":"FF138CA1-E2D6-4265-ADD1-ED97D0D87233","sourceIdentifier":"psirt@fortinet.com","created":"2026-06-17T10:42:36.887","details":[{"action":"Added","type":"Affected","newValue":"New affected value received.  <a href=\"https:\/\/github.com\/CVEProject\/cvelistV5\/blob\/main\/cves\/2026\/39xxx\/CVE-2026-39808.json\">CVE-2026-39808<\/a>"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Modified","cveChangeId":"80D9EBEC-C34B-4C5D-A541-9A16DC830615","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-06-17T10:42:36.887","details":[{"action":"Added","type":"SSVC","newValue":{"timestamp":"2026-04-22T03:55:32.291352Z","id":"CVE-2026-39808","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Modified","cveChangeId":"7D340D5A-5666-4330-89C4-6A8A694F760E","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-07-16T18:16:42.970","details":[{"action":"Added","type":"Reference","newValue":"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-39808"},{"action":"Changed","type":"SSVC","oldValue":{"timestamp":"2026-04-22T03:55:32.291352Z","id":"CVE-2026-39808","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"},"newValue":{"timestamp":"2026-07-16T17:45:11.106860Z","id":"CVE-2026-39808","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE CISA KEV Update","cveChangeId":"A8BD5951-F207-4F55-9EB8-442AAEFE409D","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","created":"2026-07-16T19:00:00.560","details":[{"action":"Added","type":"Date Added","newValue":"2026-07-16"},{"action":"Added","type":"Due Date","newValue":"2026-07-16"},{"action":"Added","type":"Required Action","newValue":"2026-07-16"},{"action":"Added","type":"Vulnerability Name","newValue":"2026-07-16"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"Modified Analysis","cveChangeId":"762DA17E-92DC-4726-83A3-2BE114B19F78","sourceIdentifier":"nvd@nist.gov","created":"2026-07-16T19:05:41.217","details":[{"action":"Added","type":"Reference Type","newValue":"CISA-ADP: https:\/\/github.com\/samu-delucas\/CVE-2026-39808 Types: Exploit, Third Party Advisory"},{"action":"Added","type":"Reference Type","newValue":"CISA-ADP: https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-39808 Types: US Government Resource"}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Modified","cveChangeId":"ADD5B4FE-B533-43E9-968D-EB83C11BD320","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-07-17T05:16:38.870","details":[{"action":"Changed","type":"SSVC","oldValue":{"timestamp":"2026-07-16T17:45:11.106860Z","id":"CVE-2026-39808","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"},"newValue":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-39808","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-39808","eventName":"CVE Translated","cveChangeId":"9493C763-2EA6-4A73-B268-A8CB50E5A6FB","sourceIdentifier":"nvd@nist.gov","created":"2026-10-26T21:10:00.170","details":[{"action":"Added","type":"Translation","newValue":"Title: FortiSandbox y FortiSandbox PaaS de Fortinet, Description: Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo (’inyección de comandos del sistema operativo’) en Fortinet FortiSandbox 4.4.0 hasta 4.4.8 puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}]}}]}