[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":97,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":104,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":110,"vulnerability-30021":117},[4,13,23,35,43,50,57,65,70,75,79,86,90],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",{"title":58,"slug":59,"text":60,"link":27,"external":9,"targets":61,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - HP, Vuln DB, product page","apache-rce-detection","🚨 Detect CVE-2026-119618 (Apache HTTP\u002F2 RCE) on your servers with any paid plan",[29,30,33,62],"\u002Fvulnerabilities-exploits\u002Fapache-http-server-race-condition_30011","primary","main",{"title":66,"slug":59,"text":67,"link":27,"external":18,"targets":68,"cta":69,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - Detection on the NS page","🚨 Now in every paid plan: detection for CVE-2026-119618 (Apache HTTP\u002F2 RCE)",[48],"Pick your plan",{"title":71,"slug":59,"text":72,"link":27,"external":9,"targets":73,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - Port Scanner page","🚨 Found Apache on your web ports? Check it for CVE-2026-119618 with any paid plan",[74],"\u002Fnetwork-vulnerability-scanning\u002Fport-scanner-online-nmap",{"title":76,"slug":59,"text":77,"link":27,"external":18,"targets":78,"cta":34,"variant":63,"priority":64,"campaign_id":59},"Apache RCE detection - WS, free tools","🚨 Running your web app on Apache? Detect CVE-2026-119618 (HTTP\u002F2 RCE) with any paid plan",[55,56],{"title":80,"slug":59,"text":81,"link":27,"external":9,"targets":82,"cta":85,"variant":63,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - URL fuzzer, Subdomain Finder","🚨 PHP2Shell, Node2Shell, *sshole & CVE-2026-119618 (Apache) detection in every paid plan, with unlimited rescans for patch validation",[83,84],"\u002Fwebsite-vulnerability-scanning\u002Fdiscover-hidden-directories-and-files","\u002Finformation-gathering\u002Ffind-subdomains-of-domain","Find out with any plan",{"title":87,"slug":59,"text":88,"link":27,"external":9,"targets":89,"cta":85,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - CVE page, product page","🚨 Apache HTTP\u002F2 RCE (CVE-2026-119618): detect it across your Apache servers",[62,33],{"title":91,"slug":92,"text":93,"link":94,"external":9,"targets":95,"cta":96,"variant":12,"priority":64,"campaign_id":59},"Apache HTTP\u002F2 RCE - VulnDB page","apache-rce-detection-1","🚨 New: free scanner for CVE-2026-119618, the Apache HTTP\u002F2 RCE. Get a free PDF report.","https:\u002F\u002Fpentest-tools.com\u002Fnetwork-vulnerability-scanning\u002Fcve-2026-119618-scanner-apache-http2-rce",[30],"Scan for free",["Island",98],{"key":99,"params":100,"result":102},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":101},"{}",{"head":103},{},["Island",105],{"key":106,"params":107,"result":108},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":101},{"head":109},{},["Island",111],{"key":112,"params":113,"result":115},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":114},"{\"text-color\":\"gray\"}",{"head":116},{},{"id":118,"detectable_with":119,"vuln_details":126,"vuln_id":144,"name":145,"published":146,"updated":8},30021,{"tool":120,"engine":123},{"id":121,"name":122},1,"Network Scanner",{"id":124,"name":125},2,"Nuclei",{"id":118,"codename":8,"description":8,"severity":127,"risk_description":128,"public_description":129,"public_recommendation":130,"recommendation":8,"references":131,"cvssv3":136,"epss_score":137,"epss_percentile":138,"cve":139,"in_cisa_catalog":9,"date":141,"software_type":8,"vendor":142,"product":143,"ptt_exploit_capabilities":8},"critical","The risk exists that a remote unauthenticated attacker could exploit this vulnerability to read sensitive information from arbitrary files located on the file system of the server.","A path traversal vulnerability (CWE-24) in the FortiSandbox JRPC API is_valid_session() function allows an unauthenticated attacker to bypass authentication. The user-supplied session value is passed to os.path.join() without validation. A session of \"..\u002F..\u002Ftmp\u002F\" resolves to \u002Ftmp\u002F, which always exists and has a recent mtime, so the session check succeeds. This grants unauthenticated access to read-only JRPC methods such as sys\u002Fstatus (version, hostname, serial number, and resource usage). Affects FortiSandbox 4.4.0 through 4.4.8 and 5.0.0 through 5.0.5. Fixed in 4.4.9 and 5.0.6 (FG-IR-26-112). The patched is_valid_session() accepts only 32-character hexadecimal session IDs.","Upgrade FortiSandbox to 4.4.9 or later, or 5.0.6 or later. If immediate upgrade is not possible, restrict access to the \u002Fjsonrpc\u002F endpoint and block JRPC requests containing path-traversal sequences.",[132,133,134,135],"https:\u002F\u002Frustlang.rs\u002Fposts\u002Fblog_cve_2026_39813_en\u002F","https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-26-112","https:\u002F\u002Fwww.csa.gov.sg\u002Falerts-and-advisories\u002Falerts\u002Fal-2026-038\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39813",9.8,0.22584,0.97741,[140],"CVE-2026-39813","2026-04-14T00:00:00Z","fortinet","fortisandbox","NETSCAN-NUCLEI-CVE-CVE-2026-39813","Fortinet FortiSandbox - Path Traversal Authentication Bypass","2026-11-13T00:00:00Z"]