{"id":"fortinet-fortisandbox-command-flaws-jul-2026","category":"patch","status":"closed","title":"Fortinet FortiSandbox flaws CVE-2026-25089 and CVE-2026-39808 exploited; Cloud release status unclear","tldr":"Two FortiSandbox flaws let attackers run commands without signing in. CISA confirms exploitation. Business IT teams should install the applicable fixes, migrate from 4.2 and confirm Cloud remediation with Fortinet.","summary":"Two command-injection flaws affect Fortinet FortiSandbox, a business system for checking suspicious files. Both allow remote attackers to run commands without signing in. Fortinet published fixes in April and June, before researchers reported attack attempts in June and CISA confirmed exploitation on 16 July. CVE-2026-25089 affects appliance, Cloud and PaaS deployments; CVE-2026-39808 affects the appliance’s 4.4 branch and nine older PaaS builds identified in Fortinet’s CVE record. Released fixes include FortiSandbox 4.4.9 and 5.0.6, with separate PaaS upgrade requirements. FortiSandbox 4.2 users must migrate. Cloud status needs care: Fortinet says it remediated the issue and customers need take no action, but its published record still labels Cloud 5.0.6 as not released. A later Cloud release was not confirmed through 3 November, so overall patch status remains partial. July reporting also documented Fortinet’s exploitation flags disagreeing with CISA.","action":"For a business or family office using FortiSandbox, ask IT to upgrade appliances to 4.4.9 or 5.0.6 or later, migrate from 4.2, and update affected PaaS deployments to 5.0.6 or later. Ask Fortinet to confirm remediation for your Cloud service. Families who do not operate these business systems have nothing to update on their personal devices.","product":"Fortinet FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS","audience":"work","severity":"critical","patch":"partial","exploited":true,"cves":["CVE-2026-25089","CVE-2026-39808"],"tags":["fortinet","fortisandbox","command-injection","actively-exploited"],"affected":["CVE-2026-25089: FortiSandbox 5.0.0–5.0.5 and 4.4.0–4.4.8","CVE-2026-25089: FortiSandbox 4.2, all versions","CVE-2026-25089: FortiSandbox Cloud 5.0.4–5.0.5","CVE-2026-25089: FortiSandbox PaaS 5.0.4–5.0.5","CVE-2026-39808: FortiSandbox 4.4.0–4.4.8","CVE-2026-39808: FortiSandbox PaaS 21.3.4055, 21.4.4072, 22.1.4113, 22.2.4134, 22.2.4151, 23.1.4245, 23.3.4329, 23.4.4350 and 23.4.4374"],"fixed":["FortiSandbox 4.4.9 or later: both CVEs","FortiSandbox 5.0.6 or later: CVE-2026-25089","FortiSandbox PaaS 5.0.2 or later: CVE-2026-39808","FortiSandbox PaaS 5.0.6 or later: CVE-2026-25089","FortiSandbox Cloud 5.0.6: Fortinet says remediated with no customer action, but labels the version not released","FortiSandbox 4.2: migrate to a fixed release"],"matches":[],"sources":[{"kind":"advisory","title":"FG-IR-26-141: Second-Order OS Command Injection via JSON Input on start vnc feature","url":"https://filestore.fortinet.com/fortiguard/psirt/csaf_second-order-os-command-injection-via-json-input-on-start-vnc-feature_fg-ir-26-141.json","by":"Fortinet","date":"2026-06-09"},{"kind":"advisory","title":"Fortinet CNA record for CVE-2026-39808","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39808.json","by":"Fortinet, via the CVE Program","date":"2026-04-14"},{"kind":"advisory","title":"Fortinet CNA record for CVE-2026-25089","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/25xxx/CVE-2026-25089.json","by":"Fortinet, via the CVE Program","date":"2026-06-09"},{"kind":"news","title":"3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs","url":"https://www.securityweek.com/3-recently-patched-fortinet-fortisandbox-vulnerabilities-in-hacker-crosshairs/","by":"SecurityWeek","date":"2026-06-17"},{"kind":"news","title":"CISA urges immediate action on actively exploited Fortinet flaws","url":"https://www.bleepingcomputer.com/news/security/cisa-warns-feds-to-patch-exploited-fortinet-fortisandbox-flaws-by-sunday/","by":"BleepingComputer","date":"2026-07-17"},{"kind":"research","title":"Threat Bulletin: CVE-2026-25089 and CVE-2026-39808 in Fortinet FortiSandbox","url":"https://emergentsec.com/blog/cve-2026-25089-cve-2026-39808-fortisandbox-kev-exploited/","by":"EmergentSec","date":"2026-07-17"}],"started":"2026-07-16","closed":"2026-07-17","created":"2026-11-03T22:19:31.459Z","updated":"2026-11-03T22:19:31.459Z","cve_notes":[{"cve":"CVE-2026-25089","name":"Command injection in FortiSandbox’s web interface","what":"A second-order command-injection flaw in the FortiSandbox, Cloud and PaaS web interface lets an attacker send crafted web requests to run operating-system commands without signing in.","severity":"critical","cvss":9.8},{"cve":"CVE-2026-39808","name":"Command injection in the FortiSandbox API","what":"A command-injection flaw in the FortiSandbox API lets an attacker run code or operating-system commands without signing in, affecting appliance 4.4 releases and older PaaS builds.","severity":"critical","cvss":9.8}],"timeline":[{"at":"2026-07-17","added":"2026-11-03T22:11:23.504Z","kind":"other","text":"EmergentSec corrected its guidance to include FortiSandbox 4.2 and nine older PaaS builds named in Fortinet’s structured records. It also documented that Fortinet’s advisory exploitation flags still disagreed with CISA.","url":"https://emergentsec.com/blog/cve-2026-25089-cve-2026-39808-fortisandbox-kev-exploited/","by":"EmergentSec","patch":null},{"at":"2026-07-16","added":"2026-11-03T22:11:23.504Z","kind":"cisa-added","text":"CISA added both CVEs to its Known Exploited Vulnerabilities catalogue. US federal agencies were given until 19 July to remediate.","url":"https://www.bleepingcomputer.com/news/security/cisa-warns-feds-to-patch-exploited-fortinet-fortisandbox-flaws-by-sunday/","by":"BleepingComputer","patch":null},{"at":"2026-06-16","added":"2026-11-03T22:11:23.504Z","kind":"wider-attacks","text":"Defused reported attempts against both flaws. SecurityWeek subsequently reported that the initially observed attempt against CVE-2026-25089 did not work.","url":"https://www.securityweek.com/3-recently-patched-fortinet-fortisandbox-vulnerabilities-in-hacker-crosshairs/","by":"SecurityWeek","patch":null},{"at":"2026-06-09","added":"2026-11-03T22:11:23.504Z","kind":"new-fix","text":"Fortinet disclosed CVE-2026-25089, with fixes in FortiSandbox 4.4.9 and 5.0.6 and PaaS 5.0.6. It told 4.2 users to migrate; it described Cloud as remediated but labelled Cloud 5.0.6 as not released.","url":"https://filestore.fortinet.com/fortiguard/psirt/csaf_second-order-os-command-injection-via-json-input-on-start-vnc-feature_fg-ir-26-141.json","by":"Fortinet","patch":"partial"},{"at":"2026-04-14","added":"2026-11-03T22:11:23.504Z","kind":"new-fix","text":"Fortinet published CVE-2026-39808. Its CVE record directs FortiSandbox users to 4.4.9 or later and affected older PaaS users to 5.0.2 or later.","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39808.json","by":"Fortinet, via the CVE Program","patch":"partial"}],"url":"https://hard.fyi/live/fortinet-fortisandbox-command-flaws-jul-2026/","json":"https://hard.fyi/api/live?id=fortinet-fortisandbox-command-flaws-jul-2026"}