Fortinet, Ivanti, and SAP have issued security patches addressing multiple critical vulnerabilities that pose significant risks including arbitrary code execution and information disclosure. Fortinet's patch addresses a severe command injection vulnerability (CVE-2026-25089) with a CVSS score of 9.1 affecting FortiSandbox products' WEB UI. Enterprise organizations should prioritize immediate patch
Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclosure. The security flaw patched by Fortinet relates to a command injection vulnerability in FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS WEB UI. It's tracked as CVE-2026-25089 (CVSS score: 9.1). "An
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
