{"id":"CVE-2026-107656","published":"2026-10-26T14:16:24.147","lastModified":"2026-10-27T04:17:40.280","description":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-185","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An authentication bypass flaw in FortiSandbox allows unauthenticated attackers to execute unauthorized code via crafted HTTP requests, enabling full system compromise including data theft, modification, and service disruption.","exploitability":"Highly exploitable due to network-accessible, no-privilege, no-user-interaction requirements; no public exploit is known but the CVSS score indicates trivial remote exploitation potential.","blast_radius":"Successful exploitation grants full administrative control over affected FortiSandbox instances, risking compromise of sandboxed malware analysis data, lateral movement within the network, and disruption of security operations.","remediation":"Upgrade to FortiSandbox 5.0.7 or later for 5.0.x branches, 4.4.10 or later for 4.4.x branches, or 4.2.10 or later for 4.2.x branches; if no fixed version is available for your branch, immediately restrict HTTP access to the management interface and disable non-essential web services until patched.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","rce","network"],"model":"garnet-coder","analyzedAt":"2026-10-27T08:47:55.385Z"}}