{"schema":"vulnpedia.poc/1","cve":"CVE-2026-39808","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-16","ransomware":false},"epss":{"score":0.93189,"percentile":0.99833},"cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/baecd56da872","executable":false,"sourceId":"baecd56da872","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-09T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"baecd56da872","modified":"2026-06-09T00:00:00Z","url":"https://vulncheck.com/xdb/baecd56da872"}],"repositoryUrl":"https://github.com/samu-delucas/CVE-2026-39808"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/50e019aa766f","executable":false,"sourceId":"50e019aa766f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-09T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"50e019aa766f","modified":"2026-06-09T00:00:00Z","url":"https://vulncheck.com/xdb/50e019aa766f"}],"repositoryUrl":"https://github.com/0xBlackash/CVE-2026-39808"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f6589d60887f","executable":false,"sourceId":"f6589d60887f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-09T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f6589d60887f","modified":"2026-06-09T00:00:00Z","url":"https://vulncheck.com/xdb/f6589d60887f"}],"repositoryUrl":"https://github.com/error-inside/CVE-2026-39808"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c86e2ab98d69","executable":false,"sourceId":"c86e2ab98d69","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-09T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c86e2ab98d69","modified":"2026-06-09T00:00:00Z","url":"https://vulncheck.com/xdb/c86e2ab98d69"}],"repositoryUrl":"https://github.com/gotr00t0day/CVE-2026-39808"}],"poc_candidates":[{"url":"https://github.com/samu-delucas/CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"PoC for Unauthenticated RCE in FortiSandbox via CVE-2026-39808","modified":"2026-07-27T04:28:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/samu-delucas/CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-07-27T04:28:21Z","url":"https://github.com/samu-delucas/CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"CVE-2026-39808","modified":"2026-08-10T02:51:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/0xBlackash/CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-08-10T02:51:30Z","url":"https://github.com/0xBlackash/CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"FortiSandbox RCE Scanner — CVE-2026-39808","modified":"2026-10-10T19:14:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-10-10T19:14:43Z","url":"https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"CVE-2026-39808 - Fortinet Sandbox - Draft","modified":"2026-06-17T01:42:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/HORKimhab/CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-06-17T01:42:09Z","url":"https://github.com/HORKimhab/CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/error-inside/CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint","modified":"2026-06-18T22:17:28Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/error-inside/CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-06-18T22:17:28Z","url":"https://github.com/error-inside/CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/gotr00t0day/CVE-2026-39808","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"An unauthenticated OS command injection vulnerability","modified":"2026-10-15T18:48:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/gotr00t0day/CVE-2026-39808"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-10-15T18:48:51Z","url":"https://github.com/gotr00t0day/CVE-2026-39808"}],"tags":[]},{"url":"https://github.com/Ghost-Bx1/Fortinet-Exploits-CVE-2026-39808-106173-107656","source":"poc-in-github","sourceId":"CVE-2026-39808","description":"PoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8","modified":"2026-10-25T18:34:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-39808","url":"https://github.com/Ghost-Bx1/Fortinet-Exploits-CVE-2026-39808-106173-107656"},{"source":"poc-in-github","sourceId":"CVE-2026-39808","modified":"2026-10-25T18:34:46Z","url":"https://github.com/Ghost-Bx1/Fortinet-Exploits-CVE-2026-39808-106173-107656"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-39808 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-39808/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39808.yaml","template":"http/cves/2026/CVE-2026-39808.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-39808%22&type=repositories","executable":false}]}