--- title: CISA urges immediate action on actively exploited... description: CISA has ordered U.S. federal agencies to patch two critical command injection vulnerabilities (CVE-2026-39808 and CVE-2026-25089) in Fortinet FortiSandbox by... canonical: https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA urges immediate action on actively exploited Fortinet flaws | daily.dev og:description: CISA has ordered U.S. federal agencies to patch two critical command injection vulnerabilities (CVE-2026-39808 and CVE-2026-25089) in Fortinet FortiSandbox by... og:url: https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7 og:image: https://api.daily.dev/og/posts/75ApDbgk7.png og:image:alt: CISA urges immediate action on actively exploited Fortinet flaws og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA urges immediate action on actively exploited Fortinet flaws **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 2 min read · 1 upvotes · 0 comments ## Summary CISA has ordered U.S. federal agencies to patch two critical command injection vulnerabilities (CVE-2026-39808 and CVE-2026-25089) in Fortinet FortiSandbox by July 19. Both flaws allow unauthenticated remote code execution with no user interaction and have been confirmed as actively exploited in the wild by threat intelligence firm Defused. Fortinet patched the issues in April and June respectively. The vulnerabilities have been added to CISA's Known Exploited Vulnerabilities catalog under Binding Operational Directive BOD 26-04. Fortinet products have a history of being targeted in ransomware and cyber espionage campaigns, with CISA tracking 28 exploited Fortinet vulnerabilities in recent years. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Critical Fortinet FortiSandbox flaws now exploited in attacks](https://daily.dev/posts/critical-fortinet-fortisandbox-flaws-now-exploited-in-attacks-ppy51tykp) · BleepingComputer · 3 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#fortinet](https://daily.dev/tags/fortinet) [View this post on daily.dev](https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISA urges immediate action on actively exploited Fortinet flaws","url":"https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7"},"datePublished":"2026-07-17T07:04:33.436Z","dateModified":"2026-07-17T11:59:49.658Z","description":"CISA has ordered U.S. federal agencies to patch two critical command injection vulnerabilities (CVE-2026-39808 and CVE-2026-25089) in Fortinet FortiSandbox by...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1b6ea48966b59d8953e534bac6c776e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1b6ea48966b59d8953e534bac6c776e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisa-urges-immediate-action-on-actively-exploited-fortinet-flaws-75apdbgk7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,vulnerability,fortinet","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"CISA urges immediate action on actively exploited Fortinet flaws"}]} ```