THREATOPS

THREAT OPS › CVEs › CVE-2026-25089

CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability

CISA KEVExploited: confirmedFortinet

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Vulnerability details

Affected productsFortiSandbox
KEV remediation due2026-07-19

Related reporting

July 2026 CVE Landscaperecordedfuture
[CISA KEV] CVE-2026-25089 — Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerabilitycisa_kev
June 2026 CVE Landscaperecordedfuture
Fortinet security advisory (AV26-351) – Update 2cccs_ca
Fortinet security advisory (AV26-568) – Update 1cccs_ca