Threats tagged 'ghsa-2p9q-qr29-qjfx'

CVE-2026-26248 is a high-severity cross-site scripting (XSS) vulnerability in Fortinet FortiSandbox versions 4.4.0 through 4.4.8 and 5.0.0 through 5.0.5, including FortiSandbox Cloud and PaaS versions 5.0.4 through 5.0.5. It allows an unauthenticated attacker to execute arbitrary scripts via crafted HTTP requests, potentially leading to full compromise of confidentiality, integrity, and availability.