CVE-2026-106170 is a vulnerability in Fortinet Fortisandbox
Published on October 13, 2026
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.
Vulnerability Analysis
CVE-2026-106170 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Uncaught Exception
An exception is thrown from a function, but it is not caught. When an exception is not caught, it may cause the program to crash or expose sensitive information.
Products Associated with CVE-2026-106170
Want to know whenever a new CVE is published for Fortinet Fortisandbox? stack.watch will email you.
Affected Versions
Fortinet FortiSandbox:- Version 5.2.0, <= 5.2.1 is affected.
- Version 5.0.0, <= 5.0.6 is affected.
- Version 4.4.0, <= 4.4.10 is affected.