CVE-2026-26248: XSS

Q: What must an attacker do to exploit this issue?

The attacker does not need authentication and can use crafted HTTP requests, but exploitation requires social engineering and user interaction.

Q: Which deployments are affected?

Affected versions are FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, and FortiSandbox Cloud and FortiSandbox PaaS 5.0.4 through 5.0.5.

Published Nov 10, 2026

Updated

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests.

Affected Software

3 affected components

Fortinet FortiSandbox>=5.0.0<=5.0.5, >=4.4.0<=4.4.8

Fortinet FortiSandbox Cloud>=5.0.4<=5.0.5

Fortinet FortiSandbox PaaS>=5.0.4<=5.0.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Fortinet FortiSandbox Cloud to a version that resolves this vulnerability.
Fixed in 5.0.6
Upgrade
Upgrade Fortinet FortiSandbox PaaS to a version that resolves this vulnerability.
Fixed in 5.0.6
Upgrade
Upgrade Fortinet FortiSandbox PaaS to a version that resolves this vulnerability.
Fixed in 5.2.0
Upgrade
Upgrade Fortinet FortiSandbox to a version that resolves this vulnerability.
Fixed in 4.4.9
Upgrade
Upgrade Fortinet FortiSandbox to a version that resolves this vulnerability.
Fixed in 5.0.6
Upgrade
Upgrade Fortinet FortiSandbox to a version that resolves this vulnerability.
Fixed in 5.2.0

Event History

Nov 10, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker does not need authentication and can use crafted HTTP requests, but exploitation requires social engineering and user interaction.

Which deployments are affected?

Affected versions are FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, and FortiSandbox Cloud and FortiSandbox PaaS 5.0.4 through 5.0.5.

CVE-2026-26248: XSS

Affected Software

Remediation

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which deployments are affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which deployments are affected?