CVE-2026-26084

No fix known EPSS <1%CVSS 8.9

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Published 2026-09-08 · CVE record · OSV

Products: Fortinet FortiSandbox PaaS, Fortinet FortiSandbox, Fortinet FortiSandbox Cloud