CVE-2026-39808

LLM-synthesized narrative grounded in this CVE's description and references.

• Fortinet/Fortisandbox2 versions

  cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*range: >=4.4.0,<=4.4.9
  • (no CPE)range: 4.4.0 through 4.4.8

• fortiguard.fortinet.com/psirt/FG-IR-26-100nvdVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• July 2026 InfraTrust Report Flags 26 Unauthenticated Vulnerabilities and Exploited SonicWall Flaws
  Cyber Security News · Jul 23, 2026
• New InfraTrust report reveals infrastructure flaws admins should patch first
  BleepingComputer · Jul 22, 2026
• CISA Adds FortiSandbox Bugs to KEV Catalog
  GovInfoSecurity · Jul 18, 2026
• Attackers target critical FortiSandbox flaws as CISA issues patch order
  The Register Security · Jul 17, 2026
• CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
  Infosecurity Magazine · Jul 17, 2026
• Fresh SharePoint Vulnerability Exploited Soon After Disclosure
  SecurityWeek · Jul 17, 2026
• CISA urges immediate action on actively exploited Fortinet flaws
  BleepingComputer · Jul 17, 2026
• CISA Warns of Fortinet FortiSandbox OS Injection Vulnerabilities Exploited in Attacks
  Cyber Security News · Jul 17, 2026
• CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
  The Hacker News · Jul 17, 2026
• Fortinet: 2 Actively-Exploited Flaws Added to CISA KEV
  Vypr Intelligence · Jul 16, 2026
• 22nd June – Threat Intelligence Report
  Check Point Research · Jul 1, 2026
• Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack
  Help Net Security · Jun 21, 2026
• Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April
  CyberScoop · Jun 17, 2026
• 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs
  SecurityWeek · Jun 17, 2026
• Three critical Fortinet sandbox bugs splattered by unknown attackers
  The Register Security · Jun 16, 2026
• Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks
  Cyber Security News · Jun 16, 2026
• Attackers are exploiting FortiSandbox vulnerabilities
  Help Net Security · Jun 16, 2026
• Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
  The Hacker News · Jun 16, 2026
• Critical Fortinet FortiSandbox flaws now exploited in attacks
  BleepingComputer · Jun 16, 2026
• CISA Adds Three Known Exploited Vulnerabilities to Catalog
  CISA Alerts