CVE-2026-26084 — Fortinet / FortiSandbox PaaS

CVE-2026-26084

Fortinet / FortiSandbox PaaS PUBLISHED

Description (CNA)

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox PaaS	affected 5.0.4 through 5.0.5
Fortinet / FortiSandbox	affected 5.0.0 through 5.0.5; affected 4.4.0 through 4.4.8; affected 4.2.1 through 4.2.8
Fortinet / FortiSandbox Cloud	affected 5.0.4 through 5.0.5

CWE

CWE-284

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-166

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.