---
id: CVE-2026-27316
title: >-
  A insufficiently protected credentials vulnerability in Fortinet FortiSandbox
  5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all
  versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all
  versio…
summary: >-
  A insufficiently protected credentials vulnerability in Fortinet FortiSandbox
  5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all
  versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all
  versio…
severity: low
cvss: 2.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-522
vendor: Fortinet
product: FortiSandbox
affected:
  - FortiSandbox >= 5.0.0 <= 5.0.5
  - FortiSandbox >= 4.4.0 <= 4.4.10
  - fortisandbox_paas 23.4.4374
  - fortisandbox_paas 23.4.4350
  - fortisandbox_paas 23.3.4329
  - fortisandbox_paas 23.1.4245
  - fortisandbox_paas 22.2.4151
  - fortisandbox_paas 22.2.4134
  - fortisandbox_paas 22.1.4113
  - fortisandbox_paas 21.4.4072
  - fortisandbox_paas 21.3.4055
  - fortisandbox_paas >= 5.0.1 <= 5.0.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-04-14T16:29:34.942295Z'
published: '2026-04-14'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:14.134Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-27316'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-113'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-113'
tags:
  - cve.org
epss: 0.00305
epssPercentile: 0.23498
ingestedAt: '2026-11-06T15:54:03.973Z'
---

## Overview

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.

## Affected

- `FortiSandbox >= 5.0.0 <= 5.0.5`
- `FortiSandbox >= 4.4.0 <= 4.4.10`
- `fortisandbox_paas 23.4.4374`
- `fortisandbox_paas 23.4.4350`
- `fortisandbox_paas 23.3.4329`
- `fortisandbox_paas 23.1.4245`
- `fortisandbox_paas 22.2.4151`
- `fortisandbox_paas 22.2.4134`
- `fortisandbox_paas 22.1.4113`
- `fortisandbox_paas 21.4.4072`
- `fortisandbox_paas 21.3.4055`
- `fortisandbox_paas >= 5.0.1 <= 5.0.5`

## Remediation

Upgrade to FortiSandbox version 5.2.0 or above
Upgrade to FortiSandbox version 5.0.6 or above
Upgrade to FortiSandbox PaaS version 5.0.6 or above