FORTINET: 🗓️ 08 Sep 2026

FORTINET Security Advisory

Published Date: Not specified

Advisory Summary

🔔 ⚠️ Unauthenticated Control of NAT Rules — Sensitive Data Exposure (CVSS 8.9)

FortiSandbox / FortiSandbox Cloud / FortiSandbox PaaS WEB UI are affected by an improper access control issue (CWE-284). A vulnerability allows an unauthenticated attacker to use crafted HTTP requests to access sensitive information, which can be used to further compromise environments, pivot into internal systems, or extract intelligence from sandbox artifacts.

🔎 Why this matters (Market/Infrastructure Impact)
Because FortiSandbox is often tightly integrated into security workflows (malware detonation, threat intelligence enrichment, artifact storage), unauthenticated access to sensitive content can undermine trust in sandbox outputs, expose internal metadata, and increase breach impact—especially in environments where sandbox web interfaces are reachable from broader networks.

🛡️ Recommended Actions (Actionable)
1. Check for the PSIRT advisory (FG-IR-26-166) and confirm whether your FortiSandbox deployments are in the affected version range.
2. Apply the recommended security update/mitigation as specified in the advisory—prioritize any patch that closes the unauthenticated NAT-rule/control path.
3. Restrict access to the PaaS WEB UI / Sandbox endpoints (network-level controls, IP allowlists, WAF rules where applicable) to reduce exposure window while patching.
4. Review HTTP access logs for anomalous requests to sandbox web endpoints (especially patterns consistent with “crafted HTTP requests”).
5. Validate authorization logic in any custom proxies/reverse configurations that front the sandbox UI.

đź“Ś References