Hackers Exploit Critical Fortinet FortiSandbox Flaws in Active Attacks

Fortinet FortiSandbox appliances are being actively targeted by exploitation attempts against multiple recently disclosed critical vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089). Observed activity within the last 24 hours suggests attackers are attempting to weaponize these flaws to bypass sandbox protections and execute arbitrary code; organizations are advised to apply patches, monitor telemetry for anomalous sandbox activity, and restrict access to management interfaces.