Fortinet disclosed a high-severity vulnerability, tracked as CVE-2026-26084, affecting its FortiSandbox platform. The web interface flaw allows unauthenticated attackers to access sensitive information via improper access controls.
The security risk carries a CVSS score of 8.9 out of 10. Impacted software includes FortiSandbox versions 5.0.0 through 5.0.5. The vulnerability also affects versions 4.4.0 through 4.4.8.
Fortinet recommends upgrading to version 5.0.6 or 4.4.9 to resolve the issue. No evidence currently suggests the flaw has been exploited in the wild.