Is CVE-2026-106172 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106172?

CVE-2026-106172 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-106172

Description

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests