CVE-2026-26248

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.5 FortiSandbox versions 4.4.0 through 4.4.8 FortiSandbox Cloud versions 5.0.4 through 5.0.5 FortiSandbox PaaS versions 5.0.4 through 5.0.5

Description An improper neutralization of input during web page generation leads to a cross-site scripting (XSS) issue. This allows an unauthenticated attacker to execute an XSS attack by using social engineering and crafted HTTP requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.