sign in--:--:--UTC

CVE-2026-25089

exploited in the wild

CVSS

9.1

Reports

7

First seen

Jun 10

Last seen

Jun 22

Affected product

Fortinet FortiSandbox

Associated actors

Recent reports

Check Point Threat Intelligence Report – 22 June 2026

Check Point ResearchJun 22 Critical

Fortinet FortiSandbox OS Command Injection Vulnerability (CVE-2026-25089)

NICS TaiwanJun 18 High

Attackers actively exploiting critical Fortinet FortiSandbox vulnerabilities disclosed in April

CyberScoopJun 17 High

Fortinet Security Advisory AV26-351 Update 1 – Multiple Products Patched

Canadian Centre AlertsJun 16 Critical

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

The Hacker NewsJun 16 Critical

Critical Fortinet FortiSandbox vulnerabilities actively exploited

Bleeping ComputerJun 16 Critical

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

The Hacker NewsJun 10

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans