Known Exploited Vulnerabilities July 16, 2026 · CISA KEV Catalog

CVE-2026-39808: Fortinet Forti Sandbox OS Command Injection Vulnerability

Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-39808 Fortinet
Related: CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 16, 2026
CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 01, 2026
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026