CVE-2026-27316

State: Published
Severity: 2.5 Low
Published: Apr 14, 2026
Updated: Apr 14, 2026
Reserved: Feb 19, 2026

Description

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.

Scores

CVSS	Score	Vector	Source
3.1	2.5 Low	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C	fortinet

Weaknesses

CWE-522 Information disclosure

Affected Products

Product	Versions
FortiSandboxFortinet	5.0.0 through 5.0.5Affected 4.4.0 through 4.4.9Affected
FortiSandbox PaaSFortinet	23.4.4374Affected 23.4.4350Affected 23.3.4329Affected 23.1.4245Affected 22.2.4151Affected 22.2.4134Affected 22.1.4113Affected 21.4.4072Affected 21.3.4055Affected 5.0.1 through 5.0.5Affected

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-113

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.