SECURITY·중요도 8·2026. 06. 16.·The Hacker News
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
── KO ──────────────────
포티넷 FortiSandbox의 취약점이 악용되고 있는 상황입니다.
위협 정보 업체 Defused Cyber에 따르면, 악성 행위자들이 포티넷 FortiSandbox에서 발견된 여러 보안 취약점을 악용하고 있다고 합니다. CVE-2026-39813, CVE-2026-39808, CVE-2026-25089 등이 각각 이틀 사이에 악용됐습니다. 특히 CVE-2026-39813은 FortiSandbox JRPC API의 경로 탐색 취약점으로, CVSS 위험 점수가 9.1입니다.
── EN ──────────────────
Multiple vulnerabilities in Fortinet FortiSandbox are being exploited by attackers.
According to threat intelligence firm Defused Cyber, bad actors are exploiting several security vulnerabilities in Fortinet FortiSandbox. The vulnerabilities CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 have been observed being exploited within the past two days. Notably, CVE-2026-39813 refers to a path traversal vulnerability in the FortiSandbox JRPC API, with a CVSS score of 9.1.