CVE-2026-27316
Insufficiently Protected Credentials in Fortinet FortiSandbox Allow LDAP Exposure
Publication date: 2026-04-14
Last updated on: 2026-04-22
Assigner: Fortinet, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fortinet | fortisandbox_cloud | 5.0.4 |
| fortinet | fortisandbox_cloud | 5.0.5 |
| fortinet | fortisandbox | From 4.4.0 (inc) to 5.0.6 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-522 | The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves insufficient protection of credentials in Fortinet FortiSandbox versions 5.0.0 through 5.0.5, all versions of FortiSandbox 4.4, and FortiSandbox PaaS versions 5.0.1 through 5.0.5. It may allow an authenticated administrator to read LDAP server credentials by inspecting client-side data.
How can this vulnerability impact me? :
An authenticated administrator could exploit this vulnerability to obtain LDAP server credentials. This could lead to unauthorized access to LDAP services, potentially exposing sensitive directory information or enabling further unauthorized actions within the network.