CRITICAL 9.8 NVD

CVE-2026-107656

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiS

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-185

Published: 2026-10-26 · Source: NVD · Feed updated: 2026-10-26

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-26 via NVD.

Risk Timeline

CVE Disclosed2026-10-26 · -1 days ago

Remediation Resources

Analysis & PoC

fortiguard.fortinet.com/psirt/FG-IR-26-185

vulnfeed aggregates 18200 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.