Posting Date: 2026/10/15

【Vulnerability Alert】FortiSandbox GUI has a critical security vulnerability (CVE-2026-107656)

  • Subject: 【Vulnerability Alert】FortiSandbox GUI has a critical security vulnerability (CVE-2026-107656)


  • Description:
    • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000017
    • Fortinet has released a critical security vulnerability advisory for FortiSandbox GUI (CVE-2026-107656, CVSS: 9.6). This vulnerability may allow an unauthenticated attacker to bypass authentication through crafted HTTP requests.
  • Affected Platforms:
    • FortiSandbox versions 5.0.0 to 5.0.6, FortiSandbox versions 4.4.0 to 4.4.9, FortiSandbox PaaS versions 5.0.0 to 5.0.6, FortiSandbox PaaS version 4.4
  • Recommended Actions:
    • Please update to the following versions: FortiSandbox version 5.0.7 (inclusive) or later, FortiSandbox version 4.4.10 (inclusive) or later, FortiSandbox PaaS version 5.0.7 (inclusive) or later
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11281-14cf7-1.html

Computer and Communication Center
Network System Division