FortiSandbox
Security incidents tagged FortiSandbox. Newest first.
1 FortiSandbox incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 0
- Longest quiet run: 12 days (Oct 14–Oct 25)
- Patched
Fortinet FortiSandbox: critical GUI authentication bypass lets unauthenticated attackers run commands (CVE-2026-107656)
Fortinet advisory FG-IR-26-185 describes an authentication bypass using an alternate path or channel (CWE-288) in the FortiSandbox GUI that lets a remote, unauthenticated attacker bypass authentication with crafted HTTP requests and execute unauthorized code or commands. It affects FortiSandbox 5.0.0 through 5.0.6 and 4.4.0 through 4.4.9, and FortiSandbox PaaS 5.0.0 through 5.0.6 and all 4.4 versions; the NVD record also lists FortiSandbox and PaaS 4.2 as affected. Fixes are FortiSandbox 5.0.7 and 4.4.10 (PaaS 5.0.7; PaaS 4.4 users must migrate to a fixed release). The 5.2 line is not affected. Fortinet rates it critical (CVSS 9.6 in the advisory, 9.8 on the CVE record) and says it is not known to be exploited. This is a separate bug from the FortiSandbox command injection CVE-2026-25089 that CISA flagged as exploited in July.
Fortinet FortiSandbox and FortiSandbox PaaSSince Oct 13, 2026
