Fortinet FortiSandbox Critical Vulnerabilities
On 12 May, Fortinet warned of critical remote code execution vulnerabilities in FortiSandbox and FortiAuthenticator, two enterprise security products. BleepingComputer’s report carried a 7.8 score. Successful exploitation could let an attacker remotely execute arbitrary code. That is an uncomfortable failure mode for products entrusted with protecting networks and detecting advanced threats.
By 16 June, exploitation had begun. BleepingComputer reported that attackers were exploiting FortiSandbox vulnerabilities. The Hacker News identified three exploited flaws and said Fortinet had patched one only the previous week. Hacker News Best’s RSS also reported that CISA added the unauthenticated command-injection flaw CVE-2026-25089 to its Known Exploited Vulnerabilities catalogue.
Taking this as factual, impact is 10%. Organisations with unpatched FortiSandbox deployments face an immediate risk. Their operational priority shifts from routine remediation to checking exposure and investigating possible compromise. FortiAuthenticator users remain part of the original disclosure, though the 16 June reports focus specifically on FortiSandbox.
Watch for Fortinet to publish further technical details, affected-version guidance or evidence defining the scale and targets of the attacks. Additional CISA entries or exploitation reports would show whether the campaign extends beyond the three FortiSandbox flaws already reported.
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday releases. Topping the
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat
<a href="https://news.ycombinator.com/item?id=48940895">Comments</a>
Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary
Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →