NCSC-2026-0428 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSandbox

Reported by NCSC-NL

Summary by Cyber Security News14 Oct 2026, 16:31 CEST

About this summary. This is a short, independently written summary of an article first published by NCSC-NL. Cyber Security News did not report or verify the underlying story. Read the original: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0428

Fortinet heeft kwetsbaarheden verholpen in FortiSandbox. De kwetsbaarheid met kenmerk CVE-2026-107656 heeft een CVSS-score van 9,6 en betreft een authenticatieomzeiling in de webmanagementinterface van FortiSandbox. Een niet-geauthenticeerde kwaadwillende kan via speciaal vervaardigde HTTP-verzoeken de authenticatie omzeilen en ongeautoriseerd code of commando's uitvoeren.

Read the full article at NCSC-NL →

Source attribution: headline and facts are from NCSC-NL (advisories.ncsc.nl). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

NCSC-2026-0398 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiMail

NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway

NCSC-2026-0427 [1.00] [M/H] Kwetsbaarheden verholpen in Ahsay AhsayCBS

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products