ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
Published Oct 15, 2026
·Updated
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-106170.
Affected Software
1 affected component
Fortinet FortiSandbox
Event History
Oct 15, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Who can exploit this vulnerability?
A remote attacker must first authenticate to an affected Fortinet FortiSandbox installation. The available information does not identify any unauthenticated attack path.
2
What is the impact of successful exploitation?
Successful exploitation can create a denial-of-service condition on the affected Fortinet FortiSandbox installation. No other impact is specified in the available information.