PT-2026-111801 · Fortinet · Fortisandbox
CVE-2026-107656
·
Published
2026-10-13
·
Updated
2026-10-14
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
FortiSandbox versions 4.4.x through 4.4.9
FortiSandbox versions 5.0.x through 5.0.6
Description
Improper access control and session management in the web management interface allow remote authentication bypass via HTTP. This issue enables attackers to issue unauthorized commands without providing credentials.
Recommendations
Upgrade FortiSandbox versions 4.4.x to 4.4.10.
Upgrade FortiSandbox versions 5.0.x to 5.0.7.
Monitor for unusual HTTP requests targeting the GUI.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fortisandbox