Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101510105959 | Publication Time | 2026-10-15 10:54:00 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-15 10:54:00 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】FortiSandbox GUI Has a Critical Security Vulnerability (CVE-2026-107656) |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000017 Fortinet has issued an advisory regarding a critical security vulnerability in FortiSandbox GUI (CVE-2026-107656, CVSS: 9.6). This vulnerability may allow an unauthenticated attacker to bypass authentication through specially crafted HTTP requests. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] FortiSandbox versions 5.0.0 through 5.0.6, FortiSandbox versions 4.4.0 through 4.4.9, FortiSandbox PaaS versions 5.0.0 through 5.0.6, FortiSandbox PaaS version 4.4 |
|||
| [Recommended Actions] Please update to the following versions: FortiSandbox version 5.0.7 or later (inclusive), FortiSandbox version 4.4.10 or later (inclusive), FortiSandbox PaaS version 5.0.7 or later (inclusive) |
|||
| [Reference] 1. https://www.twcert.org.tw/tw/cp-169-11281-14cf7-1.html |
|||