Attackers Exploit Three Critical Fortinet FortiSandbox Vulnerabilities — One Is a 'Vibecoded' AI-Generated Exploit
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17]. One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offe...
Published byEdited with DeepSeek-V4-ProImages generated with GPT Image 1.5
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17].
One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offering a real world case study in how AI lowers the barrier for attackers while introducing noisy, inconsistent c...
The flaws affect on premise and cloud versions of FortiSandbox, a platform other Fortinet security products rely on for threat verdicts.
What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores aAI-generated editorial hero image for What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores a.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores a. Article summary: Here is the full picture based on the latest reporting as of mid-June 2026.. Topic tags: general, government, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclos" source context "Ivanti, Fortinet, and SAP Release Patches for Multiple Critical ..." Reference image 2: visual subject "Photo by THECYBERTHRONE on April 16, 2026. May be an image of text that says 'FORTINET FortiSandbox CRITICAL VULNERABILITY ADVISORY !'. Fortinet
openai.com
Threat intelligence firm Defused reported on June 16, 2026, that three critical vulnerabilities in Fortinet's FortiSandbox malware analysis platform are being actively exploited within a 24-hour window . The flaws enable unauthenticated remote code execution and authentication bypass on a product that many downstream Fortinet security appliances trust to verdict malware. Adding a novel dimension to the threat, one of the exploits is suspected to be AI-generated, illustrating both the accelerating pace of weaponization and the current limitations of machine-written attack code.
The Three Vulnerabilities Under Active Exploitation
All three vulnerabilities were assigned a CVSS score of 9.1, placing them firmly in the critical-severity zone that demands immediate remediation .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Attackers Exploit Three Critical Fortinet FortiSandbox Vulnerabilities — One Is a 'Vibecoded' AI-Generated Exploit"?
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17].
What are the key points to validate first?
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17]. One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offering a real world case study in how AI lowers the barrier for attackers while introducing noisy, inconsistent c...
What should I do next in practice?
The flaws affect on premise and cloud versions of FortiSandbox, a platform other Fortinet security products rely on for threat verdicts.
Attackers Exploit Three Critical Fortinet FortiSandbox Vulnerabilities — One Is a 'Vibecoded' AI-Generated Exploit
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17]. One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offe...
Published byEdited with DeepSeek-V4-ProImages generated with GPT Image 1.5
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17].
One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offering a real world case study in how AI lowers the barrier for attackers while introducing noisy, inconsistent c...
The flaws affect on premise and cloud versions of FortiSandbox, a platform other Fortinet security products rely on for threat verdicts.
What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores aAI-generated editorial hero image for What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores a.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What are the three critical Fortinet FortiSandbox vulnerabilities being actively exploited as of mid-June 2026, what are their CVSS scores a. Article summary: Here is the full picture based on the latest reporting as of mid-June 2026.. Topic tags: general, government, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclos" source context "Ivanti, Fortinet, and SAP Release Patches for Multiple Critical ..." Reference image 2: visual subject "Photo by THECYBERTHRONE on April 16, 2026. May be an image of text that says 'FORTINET FortiSandbox CRITICAL VULNERABILITY ADVISORY !'. Fortinet
openai.com
Threat intelligence firm Defused reported on June 16, 2026, that three critical vulnerabilities in Fortinet's FortiSandbox malware analysis platform are being actively exploited within a 24-hour window . The flaws enable unauthenticated remote code execution and authentication bypass on a product that many downstream Fortinet security appliances trust to verdict malware. Adding a novel dimension to the threat, one of the exploits is suspected to be AI-generated, illustrating both the accelerating pace of weaponization and the current limitations of machine-written attack code.
The Three Vulnerabilities Under Active Exploitation
All three vulnerabilities were assigned a CVSS score of 9.1, placing them firmly in the critical-severity zone that demands immediate remediation .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Attackers Exploit Three Critical Fortinet FortiSandbox Vulnerabilities — One Is a 'Vibecoded' AI-Generated Exploit"?
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17].
What are the key points to validate first?
Three unauthenticated remote code execution flaws in Fortinet FortiSandbox (CVE 2026 39813, CVE 2026 39808, CVE 2026 25089) are under active attack as of June 16, 2026, all carrying a CVSS score of 9.1 [8][17]. One exploit, targeting CVE 2026 25089, is described as 'vibecoded' — likely AI generated and faulty — offering a real world case study in how AI lowers the barrier for attackers while introducing noisy, inconsistent c...
What should I do next in practice?
The flaws affect on premise and cloud versions of FortiSandbox, a platform other Fortinet security products rely on for threat verdicts.
Attack Vector: An unauthenticated attacker can bypass authentication by sending specially crafted HTTP requests to the FortiSandbox JRPC API .
Affected Products: FortiSandbox 5.0.0 through 5.0.5, and 4.4.0 through 4.4.8 .
Status: This flaw had no previously recorded exploitation before the June 16 reports .
CVE-2026-39808: OS command injection
Type: OS Command Injection
Attack Vector: An unauthenticated attacker can execute unauthorized code or commands by sending crafted HTTP requests .
Affected Products: FortiSandbox 4.4.0 through 4.4.8, with patches addressed in earlier Fortinet advisories .
CVE-2026-25089: OS command injection in the Web UI
Type: OS Command Injection (CWE-78)
Attack Vector: The vulnerability resides in the "start VNC" feature of the Web UI, which passes unsanitized JSON input directly to the operating system. An unauthenticated remote attacker can execute arbitrary commands via specially crafted HTTP requests .
Affected Versions:
FortiSandbox 5.0.0 through 5.0.5
FortiSandbox 4.4.0 through 4.4.8
FortiSandbox 4.2 (all versions)
FortiSandbox Cloud 5.0.4 through 5.0.5
FortiSandbox PaaS 5.0.4 through 5.0.5
Patch: Fortinet released an advisory (FG-IR-26-141) and patches on June 9, 2026. Upgrading to FortiSandbox 5.0.6 or above, FortiSandbox Cloud 5.0.6 or above, and FortiSandbox PaaS 5.0.6 or above resolves the flaw .
A note on CVSS scoring: While a few early sources initially listed CVE-2026-39808 and CVE-2026-39813 with a CVSS score of 9.8 , the authoritative mid-June reporting from NVD, Defused, BleepingComputer, and The Hacker News consistently confirms a 9.1 rating for all three CVEs . Security teams should use the 9.1 score to align with current threat intelligence.
What CVE-2026-25089 Reveals About AI-Generated Exploit Code
Defused reported that the exploit targeting CVE-2026-25089 appears to be "vibecoded" — a term indicating the code is likely AI-generated or hastily assembled, lacking the polish and reliability of a hand-crafted professional exploit .
This observation provides a rare window into how AI is changing the economics of vulnerability exploitation:
Lower barrier to entry: AI models can rapidly produce functional exploit code for well-defined bug classes like OS command injection, enabling less-skilled actors to attempt attacks on freshly patched vulnerabilities. No confirmed, reliable public exploit exists for CVE-2026-25089, yet exploitation began within days of the patch .
Faulty and inconsistent execution: The observed attack chain uses standard browser User-Agent spoofing and basic HTTP requests, but the payload is assessed as "potentially faulty with inconsistent code execution results" . This aligns with the broader reality of AI-generated code: it is often syntactically correct but logically fragile, especially for vulnerabilities that require precise protocol-level manipulation.
Noisier, more detectable attacks: Flawed exploits generate more network noise and error conditions than surgical, human-crafted tools. For defenders, this means these attacks may be easier to detect through behavioral analytics and anomaly detection, even as they remain dangerous enough to succeed against unpatched systems .
A likely future trend: CVE-2026-25089 serves as an early case study. The availability of large language models has reduced the time between patch release and first exploitation attempts. While today's results are inconsistent, the trajectory points toward more capable AI-assisted exploit development in the near future.
What Security Teams Should Do Now
The three FortiSandbox vulnerabilities are unauthenticated, low-complexity, and require no user interaction — making them ideal candidates for automated scanning and mass exploitation . FortiSandbox is particularly sensitive because other Fortinet products, including firewalls and endpoint detection systems, may rely on its malware verdicts to trigger automated blocking decisions .
Patch immediately: Upgrade to the fixed versions specified in Fortinet's advisory FG-IR-26-141 for CVE-2026-25089, and verify that patches for CVE-2026-39813 and CVE-2026-39808 (released in April 2026) are applied .
Isolate the management interface: Restrict access to the FortiSandbox Web UI and JRPC API from untrusted networks. These interfaces should not be exposed to the public internet .
Hunt for IoCs: Look for HTTP requests targeting the FortiSandbox Web UI with unusually crafted JSON payloads, and monitor for standard browser User-Agent strings in traffic to the appliance .
Assume downstream impact: If you use FortiGate, FortiAnalyzer, or other Fortinet products integrated with FortiSandbox, verify that they are receiving authentic verdicts and that no unauthorized configuration changes have occurred.
No customer impact or attribution to a specific threat group has been confirmed as of June 16, 2026, but the window between patch release and active, in-the-wild exploitation underscores the urgency for organizations to treat these 9.1-rated flaws as top-priority incidents .
Attack Vector: An unauthenticated attacker can bypass authentication by sending specially crafted HTTP requests to the FortiSandbox JRPC API .
Affected Products: FortiSandbox 5.0.0 through 5.0.5, and 4.4.0 through 4.4.8 .
Status: This flaw had no previously recorded exploitation before the June 16 reports .
CVE-2026-39808: OS command injection
Type: OS Command Injection
Attack Vector: An unauthenticated attacker can execute unauthorized code or commands by sending crafted HTTP requests .
Affected Products: FortiSandbox 4.4.0 through 4.4.8, with patches addressed in earlier Fortinet advisories .
CVE-2026-25089: OS command injection in the Web UI
Type: OS Command Injection (CWE-78)
Attack Vector: The vulnerability resides in the "start VNC" feature of the Web UI, which passes unsanitized JSON input directly to the operating system. An unauthenticated remote attacker can execute arbitrary commands via specially crafted HTTP requests .
Affected Versions:
FortiSandbox 5.0.0 through 5.0.5
FortiSandbox 4.4.0 through 4.4.8
FortiSandbox 4.2 (all versions)
FortiSandbox Cloud 5.0.4 through 5.0.5
FortiSandbox PaaS 5.0.4 through 5.0.5
Patch: Fortinet released an advisory (FG-IR-26-141) and patches on June 9, 2026. Upgrading to FortiSandbox 5.0.6 or above, FortiSandbox Cloud 5.0.6 or above, and FortiSandbox PaaS 5.0.6 or above resolves the flaw .
A note on CVSS scoring: While a few early sources initially listed CVE-2026-39808 and CVE-2026-39813 with a CVSS score of 9.8 , the authoritative mid-June reporting from NVD, Defused, BleepingComputer, and The Hacker News consistently confirms a 9.1 rating for all three CVEs . Security teams should use the 9.1 score to align with current threat intelligence.
What CVE-2026-25089 Reveals About AI-Generated Exploit Code
Defused reported that the exploit targeting CVE-2026-25089 appears to be "vibecoded" — a term indicating the code is likely AI-generated or hastily assembled, lacking the polish and reliability of a hand-crafted professional exploit .
This observation provides a rare window into how AI is changing the economics of vulnerability exploitation:
Lower barrier to entry: AI models can rapidly produce functional exploit code for well-defined bug classes like OS command injection, enabling less-skilled actors to attempt attacks on freshly patched vulnerabilities. No confirmed, reliable public exploit exists for CVE-2026-25089, yet exploitation began within days of the patch .
Faulty and inconsistent execution: The observed attack chain uses standard browser User-Agent spoofing and basic HTTP requests, but the payload is assessed as "potentially faulty with inconsistent code execution results" . This aligns with the broader reality of AI-generated code: it is often syntactically correct but logically fragile, especially for vulnerabilities that require precise protocol-level manipulation.
Noisier, more detectable attacks: Flawed exploits generate more network noise and error conditions than surgical, human-crafted tools. For defenders, this means these attacks may be easier to detect through behavioral analytics and anomaly detection, even as they remain dangerous enough to succeed against unpatched systems .
A likely future trend: CVE-2026-25089 serves as an early case study. The availability of large language models has reduced the time between patch release and first exploitation attempts. While today's results are inconsistent, the trajectory points toward more capable AI-assisted exploit development in the near future.
What Security Teams Should Do Now
The three FortiSandbox vulnerabilities are unauthenticated, low-complexity, and require no user interaction — making them ideal candidates for automated scanning and mass exploitation . FortiSandbox is particularly sensitive because other Fortinet products, including firewalls and endpoint detection systems, may rely on its malware verdicts to trigger automated blocking decisions .
Patch immediately: Upgrade to the fixed versions specified in Fortinet's advisory FG-IR-26-141 for CVE-2026-25089, and verify that patches for CVE-2026-39813 and CVE-2026-39808 (released in April 2026) are applied .
Isolate the management interface: Restrict access to the FortiSandbox Web UI and JRPC API from untrusted networks. These interfaces should not be exposed to the public internet .
Hunt for IoCs: Look for HTTP requests targeting the FortiSandbox Web UI with unusually crafted JSON payloads, and monitor for standard browser User-Agent strings in traffic to the appliance .
Assume downstream impact: If you use FortiGate, FortiAnalyzer, or other Fortinet products integrated with FortiSandbox, verify that they are receiving authentic verdicts and that no unauthorized configuration changes have occurred.
No customer impact or attribution to a specific threat group has been confirmed as of June 16, 2026, but the window between patch release and active, in-the-wild exploitation underscores the urgency for organizations to treat these 9.1-rated flaws as top-priority incidents .
thehackernews.comAttackers Exploit Three Fortinet FortiSandbox Flaws, One ...
bleepingcomputer.comCritical Fortinet FortiSandbox flaws now exploited in attacks
innovationnetworkdesign.comCRITICAL: Three FortiSandbox Flaws Under Active Explo…
cisecurity.orgMultiple Vulnerabilities in Fortinet Products Could Allow ...