CVE-2026-25089

Vendor

Fortinet

Product

FortiSandbox

CISA KEV

listed

Exposure class

Endpoint security, Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   KEV CISA KEV 16 Jul 2026

   Fortinet FortiSandbox OS Command Injection Vulnerability

   Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

   KEV Fix available CVE-2026-25089 Fortinet
2. 46
   CISA advisory CISA 16 Jul 2026

   CISA Adds Three Known Exploited Vulnerabilities to Catalog

   CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808…

   Exploited CVE-2026-25089CVE-2026-39808CVE-2026-58644 Microsoft Fortinet
3. 16
   Research Insikt Group 7 Aug 2026

   July 2026 CVE Landscape

   In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.

   CVE-2025-3248CVE-2008-4128CVE-2017-17215+57 more