VULNERABILITY INTELLIGENCE

CVE-2026-26084

CVSS score9.9 CRITICAL
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-09-08
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Weakness classification

  • psirt@fortinet.com: CWE-284

Primary references