View Ridge Security
Back to Cyber Hose

FortiSandbox CVSS 9.9 Flaw Exposes Sensitive Data via Crafted HTTP

A CVSS 9.9 FortiSandbox flaw headlines this run, alongside an OPNsense path traversal and a WooCommerce plugin RCE.

🔓 CVEs & KEV

  • CVE-2026-26084 — Fortinet FortiSandbox PaaS — CVSS 9.9 — FortiSandbox Vulnerability Allows Attackers to Access Sensitive Information via Crafted HTTP Requests

  • CVE-2026-53581 — opnsense core — CVSS 9.0 — OPNsense NTP Path Traversal Leads to Root File Overwrite

  • CVE-2026-76801 — fireplugins FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment — CVSS 8.8 — FireBox through 3.1.10 - Authenticated (Author+) Remote Code Execution to Privileg...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check