What is GHSA-99qc-rxm9-wq2h?

GHSA-99qc-rxm9-wq2h is a security advisory published by GitHub Security Advisories with Medium severity. A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1,...

Which CVE IDs does GHSA-99qc-rxm9-wq2h cover?

GHSA-99qc-rxm9-wq2h covers the following CVE IDs: CVE-2026-106172. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-99qc-rxm9-wq2h?

GHSA-99qc-rxm9-wq2h has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-99qc-rxm9-wq2hMediumCVSS 5.3

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1,...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-106172 →

📋 Description

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106172
https://fortiguard.fortinet.com/psirt/FG-IR-26-179
https://github.com/advisories/GHSA-99qc-rxm9-wq2h