What is CVE-2026-59835?

CVE-2026-59835 is a high-severity vulnerability in Fortinet Fortisandbox, classified under Exposure of Resource to Wrong Sphere. CVSS score: 8.6/10. Published 2026-07-14.

How severe is CVE-2026-59835?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Fortinet Fortisandbox

CVE-2026-59835

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network reque…

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L.

Affected products

Fortinet Fortisandbox — versions 5.0.0, 4.4.3

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

psirt@fortinet.com

Frequently asked questions

What is CVE-2026-59835?: CVE-2026-59835 is a high-severity vulnerability in Fortinet Fortisandbox, classified under Exposure of Resource to Wrong Sphere. CVSS score: 8.6/10. Published 2026-07-14.
How severe is CVE-2026-59835?: High severity. CVSS v3 base score is 8.6 out of 10.