PT-2026-32679 · Fortinet · Fortisandbox Paas+1

Published 2026-04-14 · Updated 2026-04-19 · CVE-2026-27316

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.5 FortiSandbox version 4.4 FortiSandbox PaaS versions 5.0.1 through 5.0.5

Description An issue involving insufficiently protected credentials and the use of files and directories accessible to external parties may allow an authenticated administrator to read LDAP server credentials via client-side inspection. This could enable a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Insufficiently Protected Credentials

Weakness Enumeration

CWE-552

CWE-522

Related Identifiers

BDU:2026-05552

CVE-2026-27316

Affected Products

Fortisandbox

Fortisandbox Paas

References · 4

• https://fortiguard.fortinet.com/psirt/FG-IR-26-113 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05552 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27316 · Security Note
• https://twitter.com/CVEnew/status/2045889781519835175 · Twitter Post