CVE-2026-59835

HIGH CVSS 8.6 View on NVD ↗

Description

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-145

Published: Jul 14, 2026 16:17 UTC Modified: Jul 14, 2026 16:38 UTC