CVE-2026-25089 CISA KEV · Actively exploited
OS command injection in Fortinet Fortisandbox
CVSS score
9.8
EPSS probability
%76.1
Risk score
14.9
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Similar Vulnerabilities
9.8
CVE-2022-40684 Actively exploited
Vulnerability in Fortinet FortiOS, FortiProxy, FortiSwitchManager
F
Workaround Public Exploits:10EPSS %100
9.6
CVE-2024-55591 Actively exploited
Vulnerability in Fortinet FortiOS
F
Workaround Public Exploits:11EPSS %94
9.8
CVE-2023-27997 Actively exploited
Out-of-bounds write in Fortinet Fortiproxy
F
Patch status unknown Public Exploits:8EPSS %86
9.6
CVE-2024-21762 Actively exploited
Out-of-bounds write in Fortinet FortiProxy
F
Patch status unknown Public Exploits:9EPSS %83
9.1
CVE-2025-59718 Actively exploited
Vulnerability in Fortinet FortiSwitchManager
F
WorkaroundEPSS %68
9.8
CVE-2026-39808 Actively exploited
OS command injection in Fortinet Fortisandbox
F
Patch status unknown Public Exploits:8EPSS %47
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-25089"