Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- Fortinet
- Product
- FortiSandbox
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Endpoint security
Why it ranks 62 (Critical)
- CISA KEV listed
- Product class: endpoint security
- Widely deployed vendor product (Fortinet)
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-25089 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.