Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability exists in Fortinet FortiSandbox versions 4.4 (all versions), 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1, including their Cloud counterparts. The issue involves the use of a hard-coded cryptographic key, which may allow an attacker to escalate privileges by sending specially crafted HTTP requests. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity.

CVE-2026-106172 describes a use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox products and their Cloud versions across multiple releases: 4.4 (all versions), 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1. This weakness may enable an attacker to escalate privileges via specially crafted HTTP requests. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low complexity and limited confidentiality impact.

A vulnerability exists in Fortinet FortiSandbox versions 4.4 (all versions), 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1, including their Cloud counterparts. The issue involves the use of a hard-coded cryptographic key, which may allow an attacker to escalate privileges by sending specially crafted

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4… (CVE-2026-106172)

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests

This vulnerability arises from the use of a hard-coded cryptographic key in Fortinet FortiSandbox versions 4.4 (all versions), 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1, including corresponding FortiSandbox Cloud versions. Exploitation can lead to escalation of privilege through specially crafted HTTP requests. The CVSS 3.1 base score is 4.9 (medium severity), with network attack vector, low attack complexity, no privileges required, no user interaction, and partial confidentiality impact. An official fix has been released by Fortinet.

CVE-2026-106172 is a medium severity vulnerability in Fortinet FortiSandbox versions 4.4.x, 5.0.x, and 5.2.x, including certain Cloud versions. It involves the use of a hard-coded cryptographic key that may allow an attacker to escalate privileges via specially crafted HTTP requests. An official fix

CVE-2026-106172: Escalation of privilege in Fortinet FortiSandbox


A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4… (CVE-2026-106172)CVE-2026-106172 0 A vulnerability exists in Fortinet FortiSandbox versions 4.4 (all versions), 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1, including their Cloud counterparts. The issue involves the use of a hard-coded cryptographic key, which may allow an attacker to escalate privileges by sending specially crafted HTTP requests. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. MediumVulnerability#gcve #osv #ghsa-99qc-rxm9-wq2h Join the discussion	GCVE Database	10/13/2026, 18:30:57 UTC Added: 10/13/2026, 21:56:57 UTC
CVE-2026-106172: Escalation of privilege in Fortinet FortiSandboxCVE-2026-106172 0 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests MediumVulnerability#cve #cve-2026-106172 Join the discussion	CVE Database V5	10/13/2026, 17:37:16 UTC Added: 10/13/2026, 17:49:12 UTC

Threats Tagged 'cve-2026-106172'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-106172'

Lead Pen Test Professional