Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-16 10:30 UTC
  • Importiert: 2026-06-24 12:03 UTC
  • CVSS: 9.1
  • Quelle-ID: thn_global
  • uid_hash: 382f66fe11cc12ceda753fedb441c7e735252637b353bf40aadbad11a033c40a

Inhalt

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber.

In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours.

CVE-2026-39813 (CVSS score: 9.1) refers to a path traversal vulnerability in FortiSandbox JRPC API that could

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-25089

CRITICAL

9.1

CRITICAL

9.1

2026-06-09

CVE-2026-39808

CRITICAL

9.1

CRITICAL

9.1

2026-04-14

CVE-2026-39813

CRITICAL

9.1

CRITICAL

9.1

2026-04-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews