--- title: Attackers target critical FortiSandbox flaws as CISA... description: CISA has issued a patch order after attackers were observed actively exploiting critical command injection vulnerabilities in Fortinet's FortiSandbox product.... canonical: https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Attackers target critical FortiSandbox flaws as CISA issues patch order | daily.dev og:description: CISA has issued a patch order after attackers were observed actively exploiting critical command injection vulnerabilities in Fortinet's FortiSandbox product.... og:url: https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f og:image: https://api.daily.dev/og/posts/01iOxlc5f.png og:image:alt: Attackers target critical FortiSandbox flaws as CISA issues patch order og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Attackers target critical FortiSandbox flaws as CISA issues patch order **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary CISA has issued a patch order after attackers were observed actively exploiting critical command injection vulnerabilities in Fortinet's FortiSandbox product. The flaws have been added to CISA's Known Exploited Vulnerabilities catalog, requiring federal agencies to apply patches promptly. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Critical Fortinet FortiSandbox flaws now exploited in attacks](https://daily.dev/posts/critical-fortinet-fortisandbox-flaws-now-exploited-in-attacks-ppy51tykp) · BleepingComputer · 3 upvotes · 0 comments - [Three critical Fortinet sandbox bugs splattered by unknown attackers](https://daily.dev/posts/three-critical-fortinet-sandbox-bugs-splattered-by-unknown-attackers-hpjiepvta) · The Register · 0 upvotes · 0 comments - [CISA orders feds to patch actively exploited Ivanti flaw by Sunday](https://daily.dev/posts/cisa-orders-feds-to-patch-actively-exploited-ivanti-flaw-by-sunday-f8lysw95b) · BleepingComputer · 0 upvotes · 0 comments - [Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox](https://daily.dev/posts/fortinet-fixes-two-critical-rce-flaws-in-fortiauthenticator-and-fortisandbox-sfl19vmql) · CSO Online · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#fortinet](https://daily.dev/tags/fortinet) [View this post on daily.dev](https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Attackers target critical FortiSandbox flaws as CISA issues patch order","url":"https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f"},"datePublished":"2026-07-17T11:58:50.660Z","dateModified":"2026-07-17T11:59:47.758Z","description":"CISA has issued a patch order after attackers were observed actively exploiting critical command injection vulnerabilities in Fortinet's FortiSandbox product....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/11dd5966fb0b49b31ab381fdeebe49c8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/11dd5966fb0b49b31ab381fdeebe49c8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/attackers-target-critical-fortisandbox-flaws-as-cisa-issues-patch-order-01ioxlc5f","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,vulnerability,fortinet","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Attackers target critical FortiSandbox flaws as CISA issues patch order"}]} ```