Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

포티넷 FortiSandbox의 취약점이 악용되고 있는 상황입니다.

위협 정보 업체 Defused Cyber에 따르면, 악성 행위자들이 포티넷 FortiSandbox에서 발견된 여러 보안 취약점을 악용하고 있다고 합니다. CVE-2026-39813, CVE-2026-39808, CVE-2026-25089 등이 각각 이틀 사이에 악용됐습니다. 특히 CVE-2026-39813은 FortiSandbox JRPC API의 경로 탐색 취약점으로, CVSS 위험 점수가 9.1입니다.

Multiple vulnerabilities in Fortinet FortiSandbox are being exploited by attackers.

According to threat intelligence firm Defused Cyber, bad actors are exploiting several security vulnerabilities in Fortinet FortiSandbox. The vulnerabilities CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 have been observed being exploited within the past two days. Notably, CVE-2026-39813 refers to a path traversal vulnerability in the FortiSandbox JRPC API, with a CVSS score of 9.1.