UpHeron
All vulnerabilities

Servers and applications

CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.

Severity
High 7.5
Published
4 Aug 2021
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.2.3
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiSandboxServers and applications · cpe:a:fortinet:fortisandbox
  • Every version up to 3.1.4
  • From 3.2.0 before 3.2.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-26098
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-26098