Paper/Archive/CVE-2026-107656

CVE-2026-107656

Fortinet FortiSandbox — An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.…

EPSS 0.9%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 58.1.581 × 2011.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests

Affected

ProductAffectedFixed inSource

FortiSandbox5.0.0 – 5.0.6–CNA

FortiSandbox4.4.0 – 4.4.9–CNA

FortiSandbox4.2.1 – 4.2.8–CNA

FortiSandbox PaaS5.0.0 – 5.0.6–CNA

FortiSandbox PaaS4.4.0 – 4.4.9–CNA

FortiSandbox PaaS4.2.1 – 4.2.8–CNA

Scores by source

fortinet (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-26-185