CVE-2026-107656

Vendor

Fortinet

Product

FortiSandbox, FortiSandbox PaaS

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009 (p58)

Weakness

CWE-288

Exposure class

Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 37
   CVE NVD 5d ago

   An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through…

   An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6…

   CVSS 9.8 CVE-2026-107656 Fortinet
2. 27
   ZDI advisory ZDI 17d ago

   Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

   This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The…

   CVSS 7.3 CVE-2026-107656 Fortinet