CVE-2025-61886

BRIEFING NOTE OVERVIEW: CVE-2025-61886 is a cross-site scripting (XSS) vulnerability affecting Fortinet FortiSandbox versions 5.0.0 through 5.0.4 and FortiSandbox PaaS versions 5.0.0 through 5.0.4. The vulnerability stems from improper neutralization of user input during web page generation, allowing attackers to inject malicious scripts through crafted HTTP requests. SEVERITY: The vulnerability carries a CVSS v3.1 score of 5.4 (Medium severity) with a network-based attack vector requiring no authentication but demanding user interaction. Attack complexity is low, meaning exploitation can be performed easily. The potential impact is limited to low-level compromise of confidentiality and integrity, with no availability impact. EXPLOITATION STATUS: The vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog and shows no evidence of active exploitation in the wild. The EPSS score of 0.00024 indicates minimal probability of exploitation within the next 30 days. Community attention remains low, as reflected by the moderate FAUCET Risk Score of 32.0/100, suggesting this is not a prioritized threat in current threat landscapes.