ZDI-CAN-31871: ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
Published Oct 15, 2026
·Updated
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-106170.
Affected Software
1 affected component
Fortinet FortiSandbox
Event History
Oct 15, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker who can authenticate to an affected Fortinet FortiSandbox installation can exploit it to create a denial-of-service condition.
2
What is the documented impact and severity?
The documented impact is denial of service. ZDI assigned the issue a CVSS rating of 4.9.