{"id":"CVE-2026-27316","title":"A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versio…","summary":"A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versio…","severity":"low","cvss":2.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-522"],"vendor":"Fortinet","product":"FortiSandbox","affected":["FortiSandbox >= 5.0.0 <= 5.0.5","FortiSandbox >= 4.4.0 <= 4.4.10","fortisandbox_paas 23.4.4374","fortisandbox_paas 23.4.4350","fortisandbox_paas 23.3.4329","fortisandbox_paas 23.1.4245","fortisandbox_paas 22.2.4151","fortisandbox_paas 22.2.4134","fortisandbox_paas 22.1.4113","fortisandbox_paas 21.4.4072","fortisandbox_paas 21.3.4055","fortisandbox_paas >= 5.0.1 <= 5.0.5"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-04-14T16:29:34.942295Z"},"published":"2026-04-14","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:14.134Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-27316","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-113","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-113"}],"tags":["cve.org"],"epss":0.00305,"epssPercentile":0.23498,"ingestedAt":"2026-11-06T15:54:03.973Z","slug":"CVE-2026-27316","body":"## Overview\n\nA insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.\n\n## Affected\n\n- `FortiSandbox >= 5.0.0 <= 5.0.5`\n- `FortiSandbox >= 4.4.0 <= 4.4.10`\n- `fortisandbox_paas 23.4.4374`\n- `fortisandbox_paas 23.4.4350`\n- `fortisandbox_paas 23.3.4329`\n- `fortisandbox_paas 23.1.4245`\n- `fortisandbox_paas 22.2.4151`\n- `fortisandbox_paas 22.2.4134`\n- `fortisandbox_paas 22.1.4113`\n- `fortisandbox_paas 21.4.4072`\n- `fortisandbox_paas 21.3.4055`\n- `fortisandbox_paas >= 5.0.1 <= 5.0.5`\n\n## Remediation\n\nUpgrade to FortiSandbox version 5.2.0 or above\nUpgrade to FortiSandbox version 5.0.6 or above\nUpgrade to FortiSandbox PaaS version 5.0.6 or above","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":13.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}