Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-26084
By Peleg Lampl |
10 September 2026
CVE-2026-26084 – FortiSandbox improper access control allows sensitive data access via HTTP
Improper access control in Fortinet FortiSandbox allows unauthenticated attackers to access sensitive information via crafted HTTP requests. Affected: FortiSandbox 5.0.0-5.0.5, 4.4.0-4.4.8, 4.2.1-4.2.8, FortiSandbox Cloud 5.0.4-5.0.5, FortiSandbox PaaS 5.0.4-5.0.5. Upgrade to 5.0.6+, 4.4.9+, or 5.2.0+ to mitigate.