H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2026-25089

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Vulnerability
TypeVulnerability
External ID—
First seen2026-07-16
Last seen2026-07-16

Confidence

—

Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Labels

exploitedkev

CISA KEV context

Vendor / productFortinet FortiSandbox
Added2026-07-16
Due date2026-07-19
6 recorded

Relationships

mitigates
from Remediate CVE-2026-25089
Mitigation
related-to
to Argument Injection
Technique
related-to
to Command Delimiters
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to OS Command Injection
Technique
2 external

References

nvd
CVE-2026-25089
open
cwe
CWE-78
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance