Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Fortinet patched a new critical FortiSandbox flaw

Security Affairsby @securityaffairs ()1 min read2 · 2 reads
Read at securityaffairs.com
Analyze CVE-2026-25089 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-25089
Tags
cve-2026-25089vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-25089
Unauthenticated OS Command Injection RCE in Fortinet FortiSandbox
9.876%KEV
KEV

From the original article

1 min read at securityaffairs.com

Fortinet patched a critical FortiSandbox vulnerability that could let unauthenticated attackers remotely execute commands via crafted HTTP requests. Fortinet released security updates to address several vulnerabilities affecting FortiSandbox, FortiOS, FortiProxy, and FortiPortal. The most severe issue, tracked as CVE-2026-25089 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.