CVE-2026-26084

Published: Sep 8, 2026Modified: Sep 8, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Exploitability: 3.9 / Impact: 5.3

Source: psirt@fortinet.com (Secondary)

Description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-26-166

Source: psirt@fortinet.com

Timeline

No history available yet.