NewsFortinet PSIRT
Improper access control and session management in the web management interface
Teaser from the source
CVSSv3 Score: 9.6 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiSandbox GUI may allow a remote unauthenticated attacker to bypass authentication via crafted HTTP requests. Revised on 2026-10-13 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on management
Other advisories
- HighCVE-2026-84314Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint in github.com/0xJacky/Nginx-UI
- HighCVE-2026-107809Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs in github.com/0xJacky/Nginx-UI
- HighCVE-2026-68581Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/api
- MediumCVE-2026-111920Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0) in code.vikunja.io/api
- MediumCVE-2026-112088Dav-ee Dairy-management-system: SQL-Injection
- LowCVE-2026-111993Soarkey StudentManagement: Klartextspeicherung vertraulicher Informationen
- Not ratedosv:CVE-2026-111993Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage
- Not ratedCVE-2026-98527Im Linux-Kernel wurde folgende Schwachstelle behoben: gpio: zynq: Behebung des Lecks bei der Laufzeit-Power-Management-Fehlerpfad `pm_runt…
Other news entries
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUNewsThe Register — Security
- Drupal patches critical RCE flaws, warns exploits may emerge soonNewsBleepingComputer
- Enterprise AI Enters Risk Management Phase as Security Concerns RiseNewsDark Reading
- Vulnerability Management Isn't About the Score — It's About How It Applies to YouNewsDark Reading
- Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active ExploitationNewsThe Hacker News
- NCSC-2026-0428 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSandboxNewsNCSC-NL
- Cybersecurity is a leadership problem: Why the management model needs to catch upNewsCSO Online
- UK Housing Ombudsman Service investigates 'security incident'NewsBleepingComputer
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-185
ID