critical9.9
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5,…
Impact
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinet FortiSandbox 5.0.0 | through 5.0.5 |
| FortiSandbox 4.4.0 | through 4.4.8 | |
| FortiSandbox Cloud 5.0.4 | through 5.0.5 | |
| FortiSandbox PaaS 5.0.4 | through 5.0.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.