← Database

CVE-2026-26084

CRITICAL CVSS: 9.9 Published: 2026-09-08 Modified: 2026-09-08

Description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Affected Platforms

Unknown

Weakness Type

CWE-284

References