긴급도 10/100 심각도 5.3 · 보통 악용확률 14.7% CWE-321

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests

타임라인

2026-10-13 NVD 공개
2026-10-13 첫 보도 FortiGuard PSIRT · Fabric API 인증 우회

벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD 상세 ↗ 참고 링크 ↗

CVE-2026-106172

이 취약점을 다룬 기사 (1)

Fabric API 인증 우회