High severity8.8NVD Advisory· Published Nov 10, 2026
CVE-2026-26248
CVE-2026-26248
Description
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 5.0.0 through 5.0.5, 4.4.0 through 4.4.8, 5.0.4 through 5.0.5
- Range: 5.0.4 through 5.0.5
- Range: 5.0.4 through 5.0.5
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.