VulnerabilitycriticalExploited in the wild

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

The Hacker Newsby @TheHackersNewsJun 19, 2026 · 13:44 UTC (Jun 19, 2026)4 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-39813 CVE-2026-39808 CVE-2026-25089 CVE-2026-35616

Tags: cve-2026-25089 cve-2026-35616 cve-2026-39808 cve-2026-39813 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-25089	Unauthenticated OS Command Injection RCE in Fortinet FortiSandbox	9.8	76%	KEV	Jun 9, 2026 KEV Jul 16, 2026
CVE-2026-35616	Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6	9.8	94%	KEVPoC	Apr 4, 2026 KEV Apr 6, 2026
CVE-2026-39808 +1 related CVE CVE-2026-39813	Unauthenticated OS Command Injection in Fortinet FortiSandbox 4.4	9.8	93%	KEVPoC ×3	Apr 14, 2026 KEV Jul 16, 2026

From the original article

4 min read at thehackernews.com

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808 , and CVE-2026-25089 over the past 24 hours. CVE-2026-39813 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.