Security
Loading…

CVE-2026-26084

CRITICALCVSS 9.9
View on NVD← Back to search
Description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Timeline
Published:September 8th, 2026 5:17 PM
Last modified:September 8th, 2026 6:35 PM
CVSS Scoring

CVSS v3: 9.9 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Weaknesses (CWE)
CWE-284
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute