FortiSandbox SSRF Vulnerability Allows Attackers to Proxy Internal Traffic via Crafted HTTP ...

Cyberpress • January 14, 2026

Share: View original

The vulnerability , tracked as CVE-2025-67685, has a CVSS v3.1 score of 3.4 and a Low severity rating due to its requirement for authenticated ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiSandbox SSRF Vulnerability Disclosed, Affects Internal Traffic Proxying Fortinet disclosed a Server-Side Request Forgery (SSRF) vulnerability in its FortiSandbox appliance on January 13, 2026. The vulnerability, tracked as CVE-2025-67685, allows authenticated attackers to craft HTTP requests that can proxy internal network traffic. Users are urged to update their systems to mitigate the risks associated with this flaw. 2 sources 26

Extracted Entities

Attack Types (1)

Server-Side Request Forgery

CVEs (1)

Platforms (1)

Vulnerabilities (1)