CVE-2026-59835

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.2 FortiSandbox versions 4.4.3 through 4.4.8

Description An exposure of resource to wrong sphere issue allows an unauthenticated attacker to access the VNC server of virtual machines performing malware scanning via crafted network requests. This flaw enables remote access to analysis sessions, screenshots, and security research activities without requiring credentials or user interaction, potentially exposing sensitive sandbox data and malware samples.

Recommendations Upgrade FortiSandbox versions 5.0.0 through 5.0.2 to version 5.0.3 or later. Upgrade FortiSandbox versions 4.4.3 through 4.4.8 to version 4.4.9 or later.