Description
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSandbox | 5.2.0 – ≤ 5.2.1, 5.0.0 – ≤ 5.0.6, 4.4.0 – ≤ 4.4.10 | — |
Advisories 2
- WID-SEC-2026-3940 Fortinet FortiSandbox: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 26, 2026
- NCSC-2026-0428 Kwetsbaarheden verholpen in Fortinet FortiSandbox NCSC-NL (Netherlands) · Oct 14, 2026