IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.9Yüksek

CVE-2026-26248

Fortinet FortiSandbox; Fortinet FortiSandbox Cloud; Fortinet FortiSandbox PaaS Yayım: (19 saat önce)

Açıklama

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests.

Zayıflık türü (CWE): CWE-79

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Fortinet FortiSandbox 5.0.0 – ≤ 5.0.5, 4.4.0 – ≤ 4.4.8, 4.2.1 – ≤ 4.2.8
Fortinet FortiSandbox Cloud 5.0.4 – ≤ 5.0.5
Fortinet FortiSandbox PaaS 5.0.4 – ≤ 5.0.5
fortinet fortisandboxcloud 5.0.5
fortinet fortisandboxpaas 5.0.5

Kaynaklar ve yamalar

Aynı üründe son açıklar — Fortinet (all products)

9.0Kritik
CVE-2026-126261
Fortinet FortiManager

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or c…

7.3Yüksek
CVE-2025-61625
Fortinet FortiManager; Fortinet FortiAnalyzer; Fortinet FortiManager Cloud

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManage…

5.9Orta
CVE-2026-121530
Fortinet FortiOS

A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password

6.7Orta
CVE-2026-106174
Fortinet FortiOS; Siemens RUGGEDCOM APE1808

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

9.6Kritik
CVE-2026-107656
Fortinet FortiSandbox; Fortinet FortiSandbox PaaS

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions,…

2.1Düşük
CVE-2026-106175
Fortinet FortiOS; Fortinet FortiSwitch; Fortinet FortiProxy; Siemens RUGGEDCOM APE1808

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions…