Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-26083: A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through

53
This month
CRITICAL 9.8REMOTEUPGRADEUPGRADEUPGRADE

CVE-2026-26083 is a critical-severity flaw (CVSS 9.8) affecting fortisandbox, fortisandbox cloud, fortisandbox paas. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.0 through 5

Why this priority

  • Critical severity
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score9.8 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance0.7% (top 46%)
CISA exploited listNo
WeaknessCWE-862
Published2026-05-12
Last modified2026-10-26
Publisher (CNA): Fortinet, Inc. · Vendor: fortinet

Share: LinkedIn · X · Reddit

Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

fortinet fortisandbox UPGRADE
Affected: >= 4.4.0 and < 4.4.9 · >= 5.0.0 and < 5.0.2
Fixed in: 4.4.9, 5.0.2
Safe to downgrade to: a release before 4.4.0
1. Check installed version
apt-cache policy fortisandbox || rpm -q fortisandbox || fortisandbox --version
2. UPGRADE to 4.4.9 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade fortisandbox
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade fortisandbox
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 4.4.0 (Debian / Ubuntu)
apt-cache madison fortisandbox sudo apt install fortisandbox=<VERSION_BEFORE_4.4.0> sudo apt-mark hold fortisandbox
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list fortisandbox sudo dnf downgrade fortisandbox-<VERSION_BEFORE_4.4.0> sudo dnf versionlock add fortisandbox
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
fortinet fortisandbox cloud UPGRADE
Affected: >= 5.0.2 and < 5.0.6 · >= 23.1.4245 and <= 23.4.4374 · 24.1.4436
Fixed in: 5.0.6
Safe to downgrade to: a release before 5.0.2
1. Check installed version
apt-cache policy fortisandbox-cloud || rpm -q fortisandbox-cloud || fortisandbox-cloud --version
2. UPGRADE to 5.0.6 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade fortisandbox-cloud
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade fortisandbox-cloud
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 5.0.2 (Debian / Ubuntu)
apt-cache madison fortisandbox-cloud sudo apt install fortisandbox-cloud=<VERSION_BEFORE_5.0.2> sudo apt-mark hold fortisandbox-cloud
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list fortisandbox-cloud sudo dnf downgrade fortisandbox-cloud-<VERSION_BEFORE_5.0.2> sudo dnf versionlock add fortisandbox-cloud
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
fortinet fortisandbox paas UPGRADE
Affected: >= 4.4.5 and < 4.4.9 · >= 5.0.0 and < 5.0.2 · >= 21.3.4055 and <= 23.4.4374
Fixed in: 4.4.9, 5.0.2
Safe to downgrade to: a release before 4.4.5
1. Check installed version
apt-cache policy fortisandbox-paas || rpm -q fortisandbox-paas || fortisandbox-paas --version
2. UPGRADE to 4.4.9 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade fortisandbox-paas
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade fortisandbox-paas
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 4.4.5 (Debian / Ubuntu)
apt-cache madison fortisandbox-paas sudo apt install fortisandbox-paas=<VERSION_BEFORE_4.4.5> sudo apt-mark hold fortisandbox-paas
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list fortisandbox-paas sudo dnf downgrade fortisandbox-paas-<VERSION_BEFORE_4.4.5> sudo dnf versionlock add fortisandbox-paas
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-26083?

fortisandbox: upgrade to 4.4.9, 5.0.2; fortisandbox cloud: upgrade to 5.0.6; fortisandbox paas: upgrade to 4.4.9, 5.0.2. Exact commands for each OS are on this page.

Is CVE-2026-26083 being exploited?

CVE-2026-26083 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-26083 affect?

CVE-2026-26083 affects fortisandbox, fortisandbox cloud, fortisandbox paas. Severity is critical (CVSS 9.8). A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSan

How urgent is CVE-2026-26083?

Priority 53/100. Critical severity; Remotely exploitable, no login, no user action

Software pages

Fortinet vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.