> Fabric API Authentication bypass
[DATE: 13/10/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
4.9
A Use of Hard-coded Cryptographic Key [CWE-321] in FortiSandbox and FortiSandbox Cloud API may allow an unauthenticated attacker to access some endpoints via specially crafted HTTP requests
Revised on 2026-10-13 00:00:00