NCSC-2026-0428 Vulnerabilities fixed in Fortinet FortiSandbox

As cited

Copy frozen at 2026-10-14 17:00 UTC (site build).

vulnerabilities

NCSC-2026-0428 Vulnerabilities fixed in Fortinet FortiSandbox

Fortinet released patches for three vulnerabilities in FortiSandbox. CVE-2026-107656, rated 9.6 CVSS, allows unauthenticated attackers to bypass authentication on the web management interface and execute arbitrary code or commands via crafted HTTP requests. CVE-2026-106172 and CVE-2026-106170, both moderate severity, involve a hardcoded cryptographic key in the Fabric application programming interface (API) that could grant elevated access and a denial-of-service flaw in the graphical user interface and command line interface, respectively.

Why it matters: FortiSandbox administrators must patch immediately; CVE-2026-107656 enables unauthenticated remote code execution with critical impact.

Source published

2026-10-14 14:31 UTC

First seen by Cybersecurity Tracker

2026-10-14 16:06 UTC