Fortinet PSIRT

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenAug 12, 2026
Last mentionedSep 9, 2026

Timeline

4 articles · newest first

Fortinet FortiSandbox Vulnerability Allows Unauthenticated Attackers to Access Sensitive Information

Fortinet fixed CVE-2026-26084, an unauthenticated access-control flaw in FortiSandbox GUI rated 8.9 CVSS, with no known exploitation yet.

GBHackersSep 9, 07:15 UTC · Sep 9, 2026VulnerabilityCVE-2026-260842 · 1 read

HTTP/2 Bomb CVE-2026-49975

Fortinet advisory details CVE-2026-49975, an Apache HTTP Server HTTP/2 flaw enabling denial of service, affecting versions 2.4.17 through 2.4.67.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026AdvisoryCVE-2026-499753 · 1 read

Heap overflow in kernel driver due to missing size validation

Fortinet fixes a CVSS 7.3 heap overflow in the FortiClient Windows kernel driver enabling code execution via crafted DNS responses.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026Advisory1

Server-Side Request Forgery (SSRF)

Fortinet discloses a low-severity SSRF in the FortiSIEM GUI allowing authenticated attackers to send requests from targeted devices.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026Advisory2 · 1 read

Related CVEs

by mentions

CVE-2026-26084<1%9.9
Improper Access Control in Fortinet FortiSandbox Exposes Sensitive Data
published Sep 8, 2026Fortinet FortiSandbox
CVE-2026-4997533%7.5
Unauthenticated DoS via excessive memory allocation in Apache HTTP Server (HTTP/2 'bomb')
published Jun 8, 2026apache http serverPoC ×2

Appears with

Fortinetvendor · 4
FortiSandboxproduct · 1
Apache HTTP Serverproduct · 1
FortiSIEMproduct · 1
FortiClient Windowsproduct · 1
Apache Software Foundationorganization · 1
Apache Software Foundationvendor · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.