CVE-2026-27316

CVSS Score & Metrics

Base Score

2.7 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N                                    

Vulnerability Description

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.

Vulnerability Details

Published Date

April 14, 2026

Last Modified

April 14, 2026

CWE ID

CWE-522

Source

NVD

Vendor

Fortinet

Product

FortiSandbox, FortiSandbox PaaS

External References

https://fortiguard.fortinet.com/psirt/FG-IR-26-113

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment