Known Exploited Vulnerabilities July 16, 2026 · CISA KEV Catalog

CVE-2026-25089: Fortinet Forti Sandbox OS Command Injection Vulnerability

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-25089 Fortinet
Related: CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 16, 2026
CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 01, 2026
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026