ctrlINT What the industry said about every indicator, with the quote

CVE-2026-39808Vulnerability

Fortinet FortiSandbox OS Command Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Recorded Future · last reported

Last reported 28 days ago

CISA KEVAdded 16 Jul 2026
Fix due 19 Jul 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS47.4%
higher than 98% of CVEsFIRST EPSS, as of 24 Oct 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “… 16, CISA added two critical Fortinet FortiSandbox vulnerabilities to the KEV catalogue amid active exploitation (CVE-2026-25089 and CVE-2026-39808).”

    CERT-EUGovernment
    Cyber Brief 26-08 - July 2026

  2. “CVE-2026-39808”

    Recorded FutureVendor
    July 2026 CVE Landscape

  3. “The vulnerabilities, tracked as CVE-2026-39808 and CVE-2026-25089 are both critical, with a severity rating (CVSS) of 9.1 each.”

    Infosecurity MagazineNews
    CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities

  4. “CVE-2026-39808”

    Recorded FutureVendor
    June 2026 CVE Landscape

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-25089, CVE-2024-42009, CVE-2026-15409, CVE-2026-15410, CVE-2025-55182, CVE-2021-27137, CVE-2026-46817, CVE-2026-48907, CVE-2026-12569, CVE-2025-49113, CVE-2026-33824, CVE-2025-5777, CVE-2026-48294, CVE-2026-11645, CVE-2026-42897, CVE-2026-28318, CVE-2026-20230, CVE-2026-35616, CVE-2026-33825

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-39808 here?
No account needed. We do not store your IP address.