FortiSandbox flaw CVE-2026-25089 lets attackers run commands

The content discusses a critical security vulnerability tracked as CVE-2026-25089 affecting the Fortinet ecosystem, specifically the FortiSandbox. This vulnerability allows unauthenticated attackers to execute commands using specially crafted HTTP requests, posing a significant risk by scoring a 9.1 on the CVSS scale.

Administrators are urged to take immediate action by upgrading to secure versions: FortiSandbox versions 5.0.0-5.0.5 should upgrade to 5.0.6 or higher, and versions 4.4.0-4.4.8 should upgrade to 4.4.9. Affected environments include FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS, but version 5.2 is deemed safe. Security teams should audit deployments, schedule patches promptly, and monitor system logs for unusual traffic patterns.

AI summary of the original article from SecurityOnline, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made

CVE-2026-25089 coverage
Published (UTC)	Outlet	Headline
Wed 10 Jun · 02:41 UTC	SecurityOnline	FortiSandbox flaw CVE-2026-25089 lets attackers run commands (this article)
Wed 10 Jun · 09:11 UTC	SecurityWeek	Critical Vulnerabilities Patched in Fortinet, Ivanti Products
Thu 11 Jun · 10:31 UTC	Security Affairs	Fortinet patches CVE-2026-25089 in FortiSandbox command injection
Tue 16 Jun · 14:28 UTC	Security Affairs	Fortinet warns of active exploits in unpatched FortiSandbox flaws
Wed 17 Jun · 07:21 UTC	SecurityWeek	3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs
Wed 17 Jun · 13:11 UTC	SOCRadar	FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code
Thu 16 Jul · 17:38 UTC	CISA	FortiSandbox Flaw Lets Hackers Run Code, CISA Warns
Thu 16 Jul · 18:39 UTC	CISA	CISA KEV Catalogue Adds FortiSandbox Flaw CVE-2026-25089
Fri 17 Jul · 04:50 UTC	SecurityOnline	CISA orders urgent patches for SharePoint, FortiSandbox flaws
Fri 17 Jul · 04:51 UTC	SecurityOnline	Red Hat OpenShift AI flaw lets attackers read local files
Fri 17 Jul · 10:01 UTC	SecurityOnline	292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
Fri 17 Jul · 10:01 UTC	Infosecurity	CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
Sat 18 Jul · 12:51 UTC	Security Affairs	CISA urges patch of FortiSandbox, SharePoint flaws amid exploits

CVE-2026-25089 coverage

Published (UTC)

Outlet

Headline

Wed 10 Jun · 02:41 UTC

SecurityOnline

FortiSandbox flaw CVE-2026-25089 lets attackers run commands (this article)

Wed 10 Jun · 09:11 UTC

SecurityWeek

Critical Vulnerabilities Patched in Fortinet, Ivanti Products

Thu 11 Jun · 10:31 UTC

Security Affairs