critical9.8
CVE-2026-107656
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, Forti…
Impact
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinet FortiSandbox 5.0.0 | through 5.0.6 |
| FortiSandbox 4.4.0 | through 4.4.9 | |
| FortiSandbox 4.2 All Versions, FortiSandbox PaaS 5.0.0 | through 5.0.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.