CVE-2026-59835CWE-668

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an…

High · published July 14, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.6th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2026-07-14T15:12Z
EPSS history
Timeline
  • 14 JUL 15:12Z
    A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an…
    cvelistv5