Persistent Denial of Service in Admin Profile Summary

{
  "id": "78ba8341b8124f3ecf87bc3d40ca2dd14eae22ea43fb0878f6764bbb9d6760fa",
  "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-176",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Persistent Denial of Service in Admin Profile Summary",
    "summary": "A privileged attacker may persistently deny access to the FortiSandbox GUI and CLI using crafted HTTP requests. Fortinet lists fixed upgrade versions for FortiSandbox 5.2 and 5.0; FortiSandbox 4.4 requires migration to a fixed release.",
    "evidence": "An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.",
    "products": [
      {
        "name": {
          "value": "FortiSandbox",
          "evidence": "FortiSandbox 5.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.2.2 or above",
            "evidence": "Upgrade to 5.2.2 or above"
          }
        ],
        "affected_versions": [
          {
            "value": "5.2.0 through 5.2.1",
            "evidence": "5.2.0 through 5.2.1"
          }
        ]
      },
      {
        "name": {
          "value": "FortiSandbox",
          "evidence": "FortiSandbox 5.0"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.0.7 or above",
            "evidence": "Upgrade to 5.0.7 or above"
          }
        ],
        "affected_versions": [
          {
            "value": "5.0.0 through 5.0.6",
            "evidence": "5.0.0 through 5.0.6"
          }
        ]
      },
      {
        "name": {
          "value": "FortiSandbox",
          "evidence": "FortiSandbox 4.4"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "a fixed release",
            "evidence": "Migrate to a fixed release"
          }
        ],
        "affected_versions": [
          {
            "value": "4.4 all versions",
            "evidence": "4.4 all versions"
          }
        ]
      }
    ],
    "severity": "medium",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-106170",
        "evidence": "CVE ID CVE-2026-106170"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity Medium"
  },
  "source_id": "official-fortinet-psirt",
  "document_id": 23558,
  "published_at": "2026-10-13T07:00:00+00:00"
}