ThreatsTechnology, Cloud & SaaSCriticalFortinet FortiSandbox Critical OS Command Injection Flaws CVE-2026-25089 & CVE-2026-39808 in Active ExploitationCISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.Daniel Okafor·17 Sep 2026, 07:50 IST·13 min read