CISA adds FortiSandbox flaw CVE-2026-39808 to KEV catalogue

THE CISA maintains the Known Exploited Vulnerabilities (KEV) Catalog, which helps organizations prioritize vulnerability management by listing exploited vulnerabilities. The catalog includes a specific vulnerability, CVE-2026-39808, affecting Fortinet FortiSandbox, allowing unauthorized code execution via crafted HTTP requests. Organizations are advised to apply mitigations according to vendor instructions and comply with CISA's BOD 26-04 guidance. The catalog can be accessed in multiple formats including CSV and JSON, and users can nominate new vulnerabilities for inclusion.