CVE-2026-106172

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.2.0 through 5.2.1 FortiSandbox versions 5.0.0 through 5.0.6 FortiSandbox version 4.4 FortiSandbox Cloud versions 5.2.0 through 5.2.1 FortiSandbox Cloud versions 5.0.0 through 5.0.6 FortiSandbox Cloud version 4.4

Description An issue involving the use of a hard-coded cryptographic key may allow an attacker to achieve escalation of privilege. This is triggered via specially crafted HTTP requests. Additionally, the Fabric API is subject to an authentication bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.