Uncaught Exception Vulnerability in Fortinet FortiSandbox
CVE-2026-106170

4.8MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortisandbox
Vendor
CVE Published:
13 October 2026

What is CVE-2026-106170?

An uncaught exception vulnerability exists within Fortinet FortiSandbox versions 5.2.0 to 5.2.1, 5.0.0 to 5.0.6, and all versions of 4.4. This vulnerability can be exploited by a privileged attacker to persistently restrict access to both the GUI and CLI by sending specially crafted HTTP requests. As a result, authorized users may find themselves unable to manage critical security functionalities, posing significant operational risks.

Affected Version(s)

FortiSandbox 5.2.0 <= 5.2.1

FortiSandbox 5.0.0 <= 5.0.6

FortiSandbox 4.4.0 <= 4.4.10

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-176

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.