
Vulnerabilities
FortiSandbox GUI Auth Bypass Lets Remote Attackers Execute Commands
CVE-2026-107656 allows unauthenticated remote access to FortiSandbox management interfaces, enabling command execution without valid credentials.
Everything Payload Report has reported about Fortinet: 2 stories, newest first. Part of our Vulnerabilities coverage.

CVE-2026-107656 allows unauthenticated remote access to FortiSandbox management interfaces, enabling command execution without valid credentials.

A missing authorization check in the FortiSIEM graphical interface allows authenticated users to run unauthorized commands via crafted requests.