Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Fortinet FortiSandbox flaws exploited after recent patch

Part of the FortiSandbox story · since 10 Jun

Quiet for 20 weekslast report 17 Jun6 articles5 outlets
10 Jun · SecurityOnline first23 Aug17 Sep12 OctNowThis article3rd of 6
  • Wed 10 Jun, 02:41 UTC. SecurityOnline, first report. FortiSandbox flaw CVE-2026-25089 lets attackers run commands. Cites a CVE in CISA KEV.
  • Thu 11 Jun, 10:31 UTC. Security Affairs, its first report on the story. Fortinet patches CVE-2026-25089 in FortiSandbox command injection. Cites a CVE in CISA KEV.
  • Tue 16 Jun, 10:45 UTC. The Hacker News, its first report on the story. Fortinet FortiSandbox flaws exploited after recent patch. This article, 3rd of 6.
  • Tue 16 Jun, 14:28 UTC. Security Affairs. Fortinet warns of active exploits in unpatched FortiSandbox flaws.
  • Wed 17 Jun, 07:21 UTC. SecurityWeek, its first report on the story. 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs. Cites a CVE in CISA KEV.
  • Wed 17 Jun, 13:11 UTC. SOCRadar, its first report on the story. FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code.

The article discusses three recently exploited vulnerabilities in Fortinet's FortiSandbox, underscoring one that was patched just a week before the exploitation. It highlights the importance of timely updates and vigilance in cybersecurity to protect against threats. Additionally, various resources and webinars related to cybersecurity practices are mentioned, including insights on managing AI security risks and transitioning from VPN to Zero Trust Network Access (ZTNA).

How the story developed

All 6 articles
Quiet for 20 weekslast report 17 Jun6 articles5 outlets

6 articles from 5 outlets since 10 Jun. Quiet since 17 Jun. This was the 3rd report, 6 days after the first.

Now10 Jun1112131415161718191 NovFirst reportSecurityOnline · 10 Jun, 02:41This article3rd of 6 · day 6
  • Wed 10 Jun, 02:41 UTC. SecurityOnline, first report. FortiSandbox flaw CVE-2026-25089 lets attackers run commands. Cites a CVE in CISA KEV.
  • Thu 11 Jun, 10:31 UTC. Security Affairs, its first report on the story. Fortinet patches CVE-2026-25089 in FortiSandbox command injection. Cites a CVE in CISA KEV.
  • Tue 16 Jun, 10:45 UTC. The Hacker News, its first report on the story. Fortinet FortiSandbox flaws exploited after recent patch. This article, 3rd of 6.
  • Tue 16 Jun, 14:28 UTC. Security Affairs. Fortinet warns of active exploits in unpatched FortiSandbox flaws.
  • Wed 17 Jun, 07:21 UTC. SecurityWeek, its first report on the story. 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs. Cites a CVE in CISA KEV.
  • Wed 17 Jun, 13:11 UTC. SOCRadar, its first report on the story. FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 6 articles as a list
  1. Wed 10 JunDay 01
    1. FortiSandbox flaw CVE-2026-25089 lets attackers run commands02:41 · SecurityOnline · First report · Exploited CVE · Known exploited CVE
  2. Thu 11 JunDay 11
    1. Fortinet patches CVE-2026-25089 in FortiSandbox command injection10:31 · Security Affairs · Known exploited CVE

  3. Quiet for 5 days

    Tue 16 JunDay 62
    1. Fortinet FortiSandbox flaws exploited after recent patch10:45 · The Hacker News · Picked up again · This article, 3rd of 6
    2. Fortinet warns of active exploits in unpatched FortiSandbox flaws14:28 · Security Affairs
  4. Wed 17 JunDay 72
    1. 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs07:21 · SecurityWeek · Known exploited CVE
    2. FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code13:11 · SOCRadar

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in