What’s Vulnerable › Vulnerabilities
CVE-2026-107656
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-26 · updated 2026-10-27
- Weakness: CWE-288
Description
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
Summary
CVE-2026-107656 is a critical (CVSS 9.6) authentication bypass in Fortinet FortiSandbox and FortiSandbox PaaS that lets an attacker reach protected functionality via an alternate path or channel and execute unauthorized code or commands through crafted HTTP requests. Affected versions are FortiSandbox 5.0.0 through 5.0.6, 4.4.0 through 4.4.9, and all 4.2 versions, plus FortiSandbox PaaS 5.0.0 through 5.0.6 and all 4.4 and 4.2 versions. It is not in CISA KEV and SSVC reports no known exploitation. Apply the Fortinet fixes for your branch or restrict management interface access to trusted networks until patched.
تُعدّ CVE-2026-107656 ثغرة تجاوز للمصادقة خطيرة (CVSS 9.6) في Fortinet FortiSandbox وFortiSandbox PaaS، تتيح للمهاجم الوصول إلى وظائف محمية عبر مسار أو قناة بديلة وتنفيذ تعليمات برمجية أو أوامر غير مصرّح بها من خلال طلبات HTTP مصممة خصيصًا. تشمل الإصدارات المتأثرة FortiSandbox 5.0.0 حتى 5.0.6 و4.4.0 حتى 4.4.9 وجميع إصدارات 4.2، إضافة إلى FortiSandbox PaaS 5.0.0 حتى 5.0.6 وجميع إصدارات 4.4 و4.2. الثغرة غير مدرجة في CISA KEV ولا يشير SSVC إلى استغلال معروف. طبّق تحديثات Fortinet الخاصة بفرعك أو قيّد الوصول إلى واجهة الإدارة على الشبكات الموثوقة حتى تركيب التحديث.
Affected products
- Fortinet FortiSandbox: from 5.0.0 through 5.0.6; from 4.4.0 through 4.4.9; from 4.2.1 through 4.2.8
- Fortinet FortiSandbox PaaS: from 5.0.0 through 5.0.6; from 4.4.0 through 4.4.9; from 4.2.1 through 4.2.8
In the news
- ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
- Improper access control and session management in the web management interface
References
Get alerted when CVE-2026-107656 or the next vulnerability affects your stack