Fortinet product
FortiSandbox Alert ← All Fortinet products
No CISA KEV deadline is open. CISA last added a FortiSandbox CVE on 16 Jul.
Tracked since 11 Feb · latest article Wed 14 Oct · RSS
CVE Product Added Due · federal deadline
Deadlines passed
26 articles from 7 outlets since 11 Feb; the latest 12 days ago.
FortiSandbox: coverage over time 26 articles from 7 outlets. First report 11 Feb by SecurityWeek. Busiest week: 9 articles, week of 13 Jul. 0 in the last 7 days.
Apr Jun Aug 11 Jan Now 26 per week First report SecurityWeek · 11 Feb Latest SecurityWeek · 12 days ago FortiSandbox: coverage over time 26 articles from 7 outlets. First report 11 Feb by SecurityWeek. Busiest week: 9 articles, week of 13 Jul. 0 in the last 7 days.
Mar May Jul Sep 11 Jan Now 26 per week First report SecurityWeek · 11 Feb Added to CISA KEV · CVE-2026-25089 FortiSandbox Latest SecurityWeek · 12 days ago
Show as table FortiSandbox: articles Published (UTC) Outlet Headline Wed 14 Oct · 08:01 UTC SecurityWeek Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day Tue 13 Oct · 19:24 UTC SecurityOnline Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks Mon 12 Oct · 04:01 UTC SecurityOnline Actively Exploited Vulnerabilities Jump to 100 in Q3 2026 Wed 9 Sep · 14:48 UTC SecurityWeek Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic Hijacking Tue 8 Sep · 20:23 UTC SecurityOnline Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute Traffic Sat 18 Jul · 12:51 UTC Security Affairs CISA urges patch of FortiSandbox, SharePoint flaws amid exploits Fri 17 Jul · 10:01 UTC Infosecurity CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities Fri 17 Jul · 10:01 UTC SecurityOnline 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users Fri 17 Jul · 04:51 UTC SecurityOnline Red Hat OpenShift AI flaw lets attackers read local files Fri 17 Jul · 04:50 UTC SecurityOnline CISA orders urgent patches for SharePoint, FortiSandbox flaws Thu 16 Jul · 18:39 UTC CISA CISA KEV Catalogue Adds FortiSandbox Flaw CVE-2026-25089 Thu 16 Jul · 18:39 UTC CISA CISA adds FortiSandbox flaw CVE-2026-39808 to KEV catalogue Thu 16 Jul · 17:40 UTC CISA CISA Adds CVE-2026-39808 to Known Exploited Vulnerabilities Catalogue Thu 16 Jul · 17:38 UTC CISA FortiSandbox Flaw Lets Hackers Run Code, CISA Warns Wed 17 Jun · 13:11 UTC SOCRadar FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code Wed 17 Jun · 07:21 UTC SecurityWeek 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs Tue 16 Jun · 14:28 UTC Security Affairs Fortinet warns of active exploits in unpatched FortiSandbox flaws Thu 11 Jun · 10:31 UTC Security Affairs Fortinet patches CVE-2026-25089 in FortiSandbox command injection Wed 10 Jun · 09:11 UTC SecurityWeek Critical Vulnerabilities Patched in Fortinet, Ivanti Products Wed 10 Jun · 02:41 UTC SecurityOnline FortiSandbox flaw CVE-2026-25089 lets attackers run commands Mon 18 May · 12:12 UTC The Hacker News Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws Wed 13 May · 09:49 UTC SecurityWeek Fortinet and Ivanti patch 18 flaws, including three critical bugs Wed 13 May · 07:20 UTC Security Affairs Fortinet patches critical RCE flaws in FortiAuthenticator, FortiSandbox Wed 15 Apr · 14:04 UTC The Hacker News Exploiters target SAP SQLi and Adobe zero day flaws in April Wed 15 Apr · 09:56 UTC SecurityWeek Fortinet patches critical FortiSandbox flaws and high risk Cloud bugs Wed 11 Feb · 10:05 UTC SecurityWeek Fortinet Patches High-Severity Vulnerabilities
Who reported 7 outlets, last 12 months
7 7 4 4 2 1 1 14 Oct Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day SecurityWeek 13 Oct Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks SecurityOnline 12 Oct Actively Exploited Vulnerabilities Jump to 100 in Q3 2026 SecurityOnline 9 Sep Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic Hijacking SecurityWeek 8 Sep Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute Traffic SecurityOnline 18 Jul CISA urges patch of FortiSandbox, SharePoint flaws amid exploits Security Affairs 17 Jul CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities Infosecurity 17 Jul 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users SecurityOnline 17 Jul Red Hat OpenShift AI flaw lets attackers read local files SecurityOnline 17 Jul CISA orders urgent patches for SharePoint, FortiSandbox flaws SecurityOnline
All CVEs in coverage 6 Exploited EPSS CVSS Newest CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability CVSS 9.1 Critical Exploited 93% EPSS 12 articles CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CVSS 9.1 Critical Exploited 76% EPSS 13 articles CVE-2026-39813 Fortinet FortiSandbox vulnerability CVSS 9.1 Critical – Not in KEV 22% EPSS 5 articles CVE-2025-52436 Fortinet FortiSandbox vulnerability CVSS Unrated – Not in KEV 7.3% EPSS 1 article CVE-2026-26083 Fortinet FortiSandbox vulnerability CVSS 9.1 Critical – Not in KEV 0.7% EPSS 3 articles CVE-2026-26084 Fortinet FortiSandbox PaaS vulnerability CVSS 8.9 High – Not in KEV 0.4% EPSS 2 articles CVE-2026-107656 Fortinet FortiSandbox vulnerability CVSS 9.6 Critical – Not in KEV – EPSS 2 articles How these numbers are made CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.