Search threats, CVEs… ⌘K
Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-26-145

Unauthenticated VNC access exposed on all interfaces

CVSSv3 Score: 7.7 An Exposure of Resource to Wrong Sphere vulnerability [CWE-668] in FortiSandbox may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests. Revised on 2026-07-14 00:00:00

Read the vendor bulletin Get alerts for FortiSandbox
7.7CVSS out of 10High severity
Scope

What the vendor says is affected

  • FortiSandbox
Timeline

When this advisory changed

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.

Keep investigating
See every advisory from this vendor