Critical severity9.9NVD Advisory· Published Sep 8, 2026· Updated Sep 8, 2026
CVE-2026-26084
CVE-2026-26084
Description
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 5.0.0 through 5.0.5, 4.4.0 through 4.4.8
- Range: 5.0.4 through 5.0.5
- Range: 5.0.4 through 5.0.5
Patches
Vulnerability mechanics
References
1News mentions
4- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ StoriesCyber Security News · Sep 14, 2026
- Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome ExtensionSecurityWeek · Sep 9, 2026
- FortiSandbox Vulnerability Allows Attackers to Access Sensitive Information via Crafted HTTP RequestsCyber Security News · Sep 9, 2026