NewsFortinet PSIRT
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
Teaser from the source
CVSSv3 Score: 9.9 An improper access control vulnerability [CWE-284] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests. Revised on 2026-09-08 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on Unauthenticated
Other advisories
- Not ratedosv:CVE-2026-78192WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page
- Not ratedosv:CLEANSTART-2024-AA52543Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of servic...
- Not ratedosv:CLEANSTART-2024-TP55883Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access
- Not ratedosv:CLEANSTART-2026-BX77379security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...
- Not ratedosv:CVE-2026-116522Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode
- Not ratedosv:CVE-2026-120019W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder
- Not ratedosv:CVE-2026-111109Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag
- Not ratedosv:CVE-2026-111254W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry
Other news entries
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- Critical Linux kernel flaw allows remote root attacks on MPTCP serversNewsBleepingComputer
- Linux kernel exploit enables remote root attacks on MPTCP serversNewsBleepingComputer
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- Cisco Finesse Server-Side Request Forgery VulnerabilityNewsCisco PSIRT
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-166
ID