CVE-2026-27316 — Fortinet / FortiSandbox

Description (CNA)

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox	affected 5.0.0 through 5.0.5; affected 4.4.0 through 4.4.9
Fortinet / FortiSandbox PaaS	affected 23.4.4374; affected 23.4.4350; affected 23.3.4329; affected 23.1.4245; affected 22.2.4151; affected 22.2.4134; affected 22.1.4113; affected 21.4.4072; affected 21.3.4055; affected 5.0.1 through 5.0.5

CWE

CWE-522

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-113

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.