HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-26248
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-11-10T23:34:23+00:00
- Score
- 8.8
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-26248
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-10T23:31:41+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Published at
- 2026-11-10T20:19:11.280
- Last modified
- 2026-11-10T20:19:11.280
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph