GCVE - cpe:2.3:a:fortinet:fortisandbox:5.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:5.2.1:*:*:*:*:*:*:*

part: a version: 5.2.1 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortisandbox (`0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-106172`	vulnerable	2026-11-03 10:16:14.141819	Details available MEDIUM (4.9) A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.0.4 through 5.0.6, FortiSandbox Cloud 5.0.0 through 5.0.2, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests Published: 2026-10-13T17:37:16.459Z Updated: 2026-11-06T15:42:03.991Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-26-179	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-106170`	vulnerable	2026-11-03 10:16:13.581266	Details available MEDIUM (4.8) An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests. Published: 2026-10-13T17:37:10.883Z Updated: 2026-11-06T15:42:02.675Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-26-176	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.