Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Security professionals are on high alert as threat actors actively target critical vulnerabilities in Fortinet's FortiSandbox solution, a key component of many enterprise security infrastructures designed to detect and analyze advanced threats. This development underscores the persistent challenge organizations face in securing even the security tools meant to protect them.

According to threat intelligence firm Defused Cyber, attackers have been actively exploiting at least three security flaws in Fortinet FortiSandbox within the past 24 hours. The vulnerabilities, identified as CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, pose significant risks to organizations relying on this threat detection technology. Among these, CVE-2026-398