Vulnerabilitycritical

Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808)

Help Net Securityby @zeljkazorzApr 16, 2026 · 00:00 UTC (Apr 16, 2026)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-39813 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-39813 CVE-2026-39808 CVE-2025-61886 CVE-2026-39812 CVE-2026-25691

Tags: cve-2025-61886 cve-2026-25691 cve-2026-39808 cve-2026-39812 cve-2026-39813 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-39808 +4 related CVEs CVE-2026-39813 CVE-2026-25691 CVE-2025-61886 CVE-2026-39812	Unauthenticated OS Command Injection in Fortinet FortiSandbox 4.4	9.8 group max	93%	KEVPoC ×3	Apr 14, 2026 KEV Jul 16, 2026

From the original article

1 min read at helpnetsecurity.com

Two vulnerabilities (CVE-2026-39813, CVE-2026-39808) in FortiSandbox could be leveraged by unauthenticated attackers to bypass authentication and execute unauthorized code or commands on vulnerable systems. Both vulnerabilities can be triggered with a specially crafted HTTP request, putting unpatched FortiSandbox deployments at risk.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.