VulnSocial

CVE-2026-26084Patch

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

DECLINING

Threat summary

  • Patch or workaround signal is available
  • 16 mentions across 6 observed days
  • Momentum state: declining

What's happening

  • Patch or workaround mentioned in 8 signals
  • Technical details provided in 12 signals
  • Disclosure: 6 classified signals
  • General: 2 classified signals
  • Peaked 4d ago at 6 mentions (2026-09-09); latest day: 1
  • 16 total mentions across 6 days

Deep dive

Activity timeline16 mentions / 6d
02356Mentions · 2026-09-08: 4Mentions · 2026-09-09: 6Mentions · 2026-09-10: 3Mentions · 2026-09-13: 1Mentions · 2026-09-14: 1Mentions · 2026-09-28: 1Patch / Workaround · 2026-09-08: 2Patch / Workaround · 2026-09-09: 3Patch / Workaround · 2026-09-10: 3Technical Details · 2026-09-08: 3Technical Details · 2026-09-09: 4Technical Details · 2026-09-10: 3Technical Details · 2026-09-13: 1Technical Details · 2026-09-14: 109-0809-0909-1009-1309-1409-28
Signal classification4 categories
Patch
743.8%
Disclosure
637.5%
General
212.5%
Disclo​sure
16.3%
Referenced assets11 URLs
By indicator
Classification over time
DateTotalLabels
2026-09-084
Disclosure1Disclo​sure1Patch2
2026-09-096
Disclosure2General2Patch2
2026-09-103
Patch3
2026-09-131
Disclosure1
2026-09-141
Disclosure1
2026-09-281
Disclosure1
Full discourse16 posts
  • Cyber Security News@The_Cyber_News
    Disclosure

    ‼️ FortiSandbox Vulnerability Allows Attackers to Access Sensitive Information via Crafted HTTP Requests Source: https://cybersecuritynews.com/fortisandbox-vulnerability-access-sensitive-data/ The flaw, tracked as CVE-2026-26084, stems from improper access control in the graphical user interface component that FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS all share, and it has been assigned a CVSS v3.1 score of 8.9, placing it firmly in the high-severity category. FortiSandbox is widely deployed across enterprise and government networks as an advanced threat detection appliance, using sandboxing techniques to analyze suspicious files and network traffic for zero-day malware and other advanced threats. #cybersecuritynews

    Post summary

    The article announces a high‑severity CVE‑2026‑26084 in FortiSandbox caused by improper GUI access control that lets attackers retrieve sensitive data via crafted HTTP requests, with no PoC, exploit, or patch information provided.

    4372150288.3K
    75.6K followersView on X
  • ابو سعود 💻@AbuSaud_Cyber
    Disclosure

    ‼️ ثغرة في FortiSandbox تسمح للمهاجمين يوصلون لمعلومات حساسة عن طريق HTTP requests ملفقة الثغرة مسجلة باسم CVE-2026-26084، وسببها ضعف في التحكم بالوصول داخل مكوّن الـ graphical user interface المشترك بين FortiSandbox و FortiSandbox Cloud و FortiSandbox PaaS، واخذت تقييم CVSS v3.1 بمقدار 8.9، يعني تصنيفها عالي الخطورة بشكل واضح. و FortiSandbox منتشر بشكل واسع في شبكات الشركات والجهات الحكومية كجهاز متقدم لكشف التهديدات، ويستخدم تقنيات الـ sandboxing عشان يحلل الملفات المشبوهة وحركة الشبكة بحثاً عن zero-day malware وتهديدات متقدمة ثانية.

    Post summary

    The post announces CVE-2026-26084 in FortiSandbox, describing an access control vulnerability with a CVSS score of 8.9, but it does not include PoC, exploit code, patch information, or evidence of active exploitation.

    02013238
    1.5K followersView on X
  • yousukezan@yousukezan
    Disclosure

    Fortinetは、FortiSandboxのWebインターフェースに認証なしで機密情報へアクセスできるアクセス制御不備「CVE-2026-26084」があると公表した。対象はFortiSandbox、Cloud、PaaSのGUIである。 Fortinetによると、問題はNATルール関連機能の認可不備で、管理インターフェースへ到達できる攻撃者が細工したHTTPリクエストを送ることで、事前認証なしに情報へアクセスできる。具体的なリクエスト形式や露出する情報、PoCは公開されていない。 影響するのはFortiSandbox 5.0.0〜5.0.5と4.4.0〜4.4.8、FortiSandbox Cloud 5.0.4〜5.0.5、FortiSandbox PaaS 5.0.4〜5.0.5。修正版は5.0.6以降または4.4.9以降で、FortiSandbox 5.2、Cloud 4.4、PaaS 5.2は影響を受けない。 Fortinetは9月8日の公開時点で実悪用を確認していない。 https://gbhackers.com/fortinet-fortisandbox-vulnerability-3/

    Post summary

    Fortinet disclosed an authentication‑bypass flaw (CVE‑2026‑26084) affecting FortiSandbox GUI that allows unauthenticated access via crafted HTTP requests; no PoC or active exploitation is reported but patched versions are available.

    010221.3K
    16.5K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Fortinet fixed three critical Fortinet vulnerabilities. Attackers can exploit CVE-2026-84390 and CVE-2026-26084 to access corporate data. #Fortinet #Vulnerabilities #Cybersecurity #InfoSec #PatchManagement https://securityonline.info/fortinet-vulnerabilities-patch/ https://t.co/GAIAYjip34

    Post summary

    Fortinet has released patches for three critical vulnerabilities, including CVE-2026-84390 and CVE-2026-26084, to prevent potential exploitation of corporate data.

    01012451
    12.9K followersView on X
  • GovCERT.CZ@GOVCERT_CZ
    Patch

    🚨 Upozorňujeme na několik zranitelností v produktech Fortinet, CVE-2026-84388, CVE-2026-84390, CVE-2026-26084 a CVE-2026-84393. Zranitelnosti postihují FortiPAM Chrome Extension, FortiMonitor OnSight, FortiSandbox, FortiOS a FortiProxy a mohou neautentizovanému útočníkovi umožnit ovlivnit provoz prohlížeče při návštěvě škodlivého webu a přesměrovat jej přes infrastrukturu útočníka, obejít autentizaci pomocí podvržených nebo opakovaně použitých JWT tokenů, získat citlivé informace prostřednictvím speciálně vytvořených HTTP požadavků nebo provést útok typu man-in-the-middle, pokud se nachází na síťové trase mezi portálem Agentless ZTNA a backendovými weby. Úspěšné zneužití může vést k neoprávněnému přístupu, kompromitaci citlivých informací a odposlechu či manipulaci síťové komunikace. 📌Doporučujeme aktualizovat FortiPAM Chrome Extension 8.0 na verzi 8.0.1.123 nebo novější a u řady 7.4 přejít na opravenou verzi, FortiMonitor OnSight na verzi 7.2.8 nebo novější, FortiSandbox podle používané větve na verzi 4.4.9, 5.0.6 nebo 5.2.0 či novější, FortiSandbox Cloud a PaaS na verzi 5.0.6 nebo novější a FortiOS a FortiProxy na verzi 7.6.7 nebo novější, případně 8.0.0 nebo novější.

    Post summary

    The post announces multiple Fortinet CVEs affecting various products and provides specific patch versions to remediate the unauthenticated remote‑code and MITM vulnerabilities.

    10011869
    4.3K followersView on X
  • セキュリティ対策Lab@securityLab_jp
    Patch

    Fortinet、FortiMonitor・FortiSandbox・FortiPAMの脆弱性を修正　認証回避など3件、CVSS最大9.6(FG-IR-26-170,FortiPAMFG-IR-26-168,CVE-2026-26084) https://rocket-boys.co.jp/security-measures-lab/fortinet-cve-2026-26084-security-update/ #セキュリティ対策Lab #security #securitynews #セキュリティ #脆弱性

    Post summary

    Fortinet released a security update that patches three vulnerabilities, including CVE‑2026‑26084 with a CVSS score of 9.6; the patch is now available.

    01010167
    636 followersView on X
  • tpx Security ⠠⠵@tpx_Security
    Patch

    Fortinet reveló la vulnerabilidad de alta severidad CVE-2026-26084 (CVSS 8.9) que afecta a las plataformas FortiSandbox, FortiSandbox Cloud y FortiSandbox PaaS. La falla de control de acceso (CWE-284) en el componente de la interfaz Web UI permite a atacantes no autenticados exfiltrar información sensible, logs de red y configuraciones mediante solicitudes HTTP manipuladas sin necesidad de credenciales. Fortinet recomienda actualizar a las versiones corregidas 5.0.6 o 4.4.9 a la brevedad.

    Post summary

    Fortinet disclosed CVE-2026-26084, a high‑severity unauthenticated Web UI access control flaw affecting FortiSandbox products; the advisory recommends patching to version 5.0.6 or 4.4.9.

    10000187
    3.8K followersView on X
  • TheKnight7G@WH173H47
    Disclosure

    Fortinet's CVE-2026-26084 reveals improper access controls in FortiSandbox (5.0.0 – 5.0.5, 4.4.0 – 4.4.8) and its cloud versions.

    Post summary

    The post discloses that FortiSandbox versions 5.0.x and 4.4.x suffer from improper access controls, without mentioning any PoC, exploit, active usage, or remediation.

    0001041
    22 followersView on X
  • TRONCAL Yannick@ytroncal
    Disclosure

    CVE-2026-26084: the sandbox appliance that answers questions it should refuse https://dev.to/bianliang/cve-2026-26084-the-sandbox-appliance-that-answers-questions-it-should-refuse-5a1b

    Post summary

    The tweet references CVE-2026-26084 and links to an article describing a sandbox appliance that answers questions it should refuse, without providing PoC, exploit, patch, or active exploitation information.

    0000033
    159 followersView on X
  • Ergun Akman@AturcDestek
    Disclosure

    🚨 FortiSandbox'ta Kritik Erişim Kontrolü Zafiyeti (CVE-2026-26084) – Kimlik Doğrulaması Olmayan Saldırganlar Hassas Verilere Erişebiliyor! https://www.linkedin.com/pulse/fortisandboxta-kritik-eri%25C5%259Fim-kontrol%25C3%25BC-zafiyeti-kimlik-ergun-akman-n2sjf @LinkedIn aracılığıyla

    Post summary

    The LinkedIn post discloses a critical access‑control vulnerability (CVE‑2026‑26084) in FortiSandbox that allows unauthenticated attackers to access sensitive data, with no mention of a PoC, exploit, patch, or active exploitation.

    0000033
    20 followersView on X
  • tpx Security ⠠⠵@tpx_Security
    Patch

    Fortinet reveló la vulnerabilidad de alta severidad CVE-2026-26084 (CVSS 8.9) que afecta a las plataformas FortiSandbox, FortiSandbox Cloud y FortiSandbox PaaS. La falla de control de acceso (CWE-284) en el componente de la interfaz Web UI permite a atacantes no autenticados exfiltrar información sensible, logs de red y configuraciones mediante solicitudes HTTP manipuladas sin necesidad de credenciales. Fortinet recomienda actualizar a las versiones corregidas 5.0.6 o 4.4.9 a la brevedad.

    Post summary

    Fortinet announced the high‑severity CVE‑2026‑26084, a web UI access‑control issue allowing unauthenticated data exfiltration, and urges users to patch to versions 5.0.6 or 4.4.9.

    00000223
    3.8K followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨Critical - Fortinet FortiSandbox Improper Access Control Info Leak (CVE-2026-26084) Fortinet FortiSandbox (incl. FortiSandbox Cloud/PaaS) has improper access control in its HTTP handling, allowing unauthenticated attackers to send crafted HTTP requests to access sensitive information remotely. No privileges or user interaction required. 👉Affected / Fixed: - FortiSandbox 5.0.0-5.0.5 → 5.0.6 - FortiSandbox 4.4.0-4.4.8 → 4.4.9 - FortiSandbox 4.2.1-4.2.8 → no fix available - FortiSandbox Cloud 5.0.4-5.0.5 → 5.0.6 - FortiSandbox PaaS 5.0.4-5.0.5 → 5.0.6

    Post summary

    The advisory announces a critical CVE-2026-26084 in FortiSandbox with detailed technical notes and provides patch information for affected versions. No evidence of PoC, active exploitation, or false positive claims is offered.

    0000087
    303 followersView on X
  • SecureShield@SecureShield_
    General

    一次情報(NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-26084 参照元(ベンダー等): https://fortiguard.fortinet.com/psirt/FG-IR-26-166

    Post summary

    The statement merely references the CVE and provides links to the NVD and vendor PSIRT pages, offering no additional information about the vulnerability.

    0000040
    25 followersView on X
  • Undercode News@undercode_news
    General

    🚨 Fortinet FortiSandbox Under Fire: High-Severity #CVE-2026-26084 Could Expose Sensitive Security Data Without Authentication + Video -Fact Checker: ✅: 5 ❌: 1 || 5/6 → Score: 83% 🦾 -Prediction: 📈 4 Positive | 📉 1 Negative https://undercodenews.com/fortinet-fortisandbox-under-fire-high-severity-cve-2026-26084-could-expose-sensitive-security-data-without-authentication-video/

    Post summary

    The article announces a high‑severity vulnerability (CVE‑2026‑26084) in Fortinet FortiSandbox that could expose sensitive data, but it gives no evidence of PoC, exploitation, patches, or technical details.

    0000040
    117 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    A severe access control flaw in FortiSandbox lets attackers pull logs, configs, or other sensitive data via crafted HTTP requests—without credentials. CVE-2026-26084 hits on-premises, Cloud, and PaaS versions across 4.4.x and 5.0.x branches. FortiSandbox 5.2 (and Cloud 4.4 / PaaS 5.2) are safe; others need patching to 5.0.6 / 4.4.9. #CVE2026-26084 #FortiSandbox #Vulnerability #SecurityNews #Cybersecurity #PatchNow #FortiSandbox #CVE2026-26084 #AccessControl #SecurityPatch #Cybersecurity #Vulnerability https://thedailytechfeed.com/fortisandbox-web-ui-bug-lets-attackers-sneak-information-without-credentials/

    Post summary

    FortiSandbox suffers an access control flaw that lets unauthenticated attackers retrieve logs and configs; patching to 5.0.6 / 4.4.9 mitigates the risk, and newer versions are safe.

    0000064
    720 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclo​sure

    🚨 CRITICAL — CVE-2026-26084 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,… CVSS 9.9 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-26084 #Fortinet #CyberSecurity #InfoSec

    Post summary

    A new critical improper access control vulnerability (CVE‑2026‑26084) affects Fortinet FortiSandbox 5.0.x and 4.4.x, with a CVSS score of 9.9 and currently no patch available.

    0000048
    86 followersView on X

Explore more

Back to dashboard