CVE-2026-106170

No fix known EPSS <1%CVSS 4.8

An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.

Published 2026-10-13 · CVE record · OSV

Products: Fortinet FortiSandbox