CVE-2026-25089 - CVE Report

Description

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

9.8

CVSS CRITICAL

Details

Published

16 Jul 2026 00:00

Modified

N/A

Source

CIRCL

Vendor

Fortinet

Product

FortiSandbox

Fix Version

Vendor Patch / Mitigation Available

References

• nvd.nist.gov/vuln/detail/CVE-2026-25089
• cve.circl.lu/cve/CVE-2026-25089
• cve.mitre.org/cgi-bin/cvename.cgi
• vuldb.com/

CVE-2026-25089 CRITICAL

Description

Details

References