Fortinet Warned as Three Critical FortiSandbox Bugs Come Under Attack

Cybersecurity firm Defused Cyber observed active exploitation of three critical FortiSandbox vulnerabilities — two with patches available since April and a third patched last week — that permit unauthenticated OS command execution and path traversal via crafted HTTP requests; one exploit appears to have been generated with AI, underscoring rapid exploitation and narrow patching windows for Fortinet products.