VDB
CVE-2026-106172
CVE-2026-106172
PUBLISHED
CVSS 4.9 MEDIUM
Reported by fortinet · Published October 13, 2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests
Risk Scores
CVSS 3.1
4.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiSandbox | 5.2.0, 5.0.0, 4.4.0 |
| Fortinet | FortiSandbox Cloud | 5.0.4, 5.0.0, 4.4.0 |
| Fortinet | FortiSandbox Cloud | 5.0.4, 5.0.0, 4.4.0 |
| Fortinet | FortiSandbox | 5.2.0, 5.0.0, 4.4.0 |
Timeline
- Oct 13, 2026 Coalition ESS Score
- Oct 13, 2026 CVE Published
- Oct 14, 2026 EPSS Score
- Oct 14, 2026 CVE Updated