Critical severity9.9NVD Advisory· Published Sep 8, 2026· Updated Sep 8, 2026

CVE-2026-26084

Description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/FortiSandbox PaaSllm-fuzzy
Range: 5.0.4 through 5.0.5
Fortinet/FortiSandbox Cloudllm-fuzzy
Range: 5.0.4 through 5.0.5
Fortinet/Fortisandboxllm-fuzzy
Range: 5.0.0 through 5.0.5, 4.4.0 through 4.4.8

Patches

Vulnerability mechanics

References

fortiguard.fortinet.com/psirt/FG-IR-26-166nvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000