> Improper access control and session management in the web management interface

[SOURCE] Fortinet FortiGuard [DATE: 13/10/2026 07:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 9.6

 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiSandbox GUI may allow a remote unauthenticated attacker to bypass authentication via crafted HTTP requests.

  Revised on 2026-10-13 00:00:00

[messages.read_original_source] →