INCIDENT EVIDENCE GRAPH

CISA urges immediate action on actively exploited Fortinet flaws

2026-07-16T00:00:00Z

CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...]

• Victim: users of Fortinet FortiSandbox, US government agencies
• Actor: unidentified threat actors
• Exploit: two unmentioned FortiSandbox vulnerabilities
• Method: active exploitation of unpatched vulnerabilities

Primary evidence

1. CISA urges immediate action on actively exploited Fortinet flaws
2. CVE-2026-39808: Fortinet FortiSandbox OS Command Injection Vulnerability

中文