Description
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSandbox | 5.0.0 – ≤ 5.0.5, 4.4.0 – ≤ 4.4.8, 4.2.1 – ≤ 4.2.8 | — |
| Fortinet | FortiSandbox Cloud | 5.0.4 – ≤ 5.0.5 | — |
| Fortinet | FortiSandbox PaaS | 5.0.4 – ≤ 5.0.5 | — |
Advisories 2
- WID-SEC-2026-3257 Fortinet FortiSandbox: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026
- NCSC-2026-0355 Kwetsbaarheden verholpen in Fortinet Forti-producten NCSC-NL (Netherlands) · Sep 9, 2026