PT-2026-58073 · Fortinet · Fortisandbox

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-59835

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.2 FortiSandbox versions 4.4.3 through 4.4.8

Description An exposure of resource to wrong sphere issue allows an unauthenticated attacker to access the VNC server of virtual machines performing scanning via crafted network requests. This flaw enables access without credentials or user interaction, potentially leading to the exposure of sensitive sandbox data.

Recommendations Update FortiSandbox versions 5.0.0 through 5.0.2 to version 5.0.3 or later. Update FortiSandbox versions 4.4.3 through 4.4.8 to version 4.4.9 or later.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2026-59835

Affected Products

Fortisandbox

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-59835 · Security Note
• https://twitter.com/KaitanSecurity/status/2077068118946406639 · Twitter Post
• https://fortiguard.fortinet.com/psirt/FG-IR-26-145 · Note
• https://twitter.com/dailytechonx/status/2077062192998797474 · Twitter Post
• https://twitter.com/techepages/status/2077077099425456260 · Twitter Post