FortiSandbox OS command injection Vulnerability Let Attackers execute Malicious code

Cybersecuritynews •Abinaya • December 10, 2025

Fortinet has released a critical security update for its FortiSandbox analysis appliances to fix a dangerous vulnerability. If left unpatched, this flaw could allow attackers to take control of the underlying system. The vulnerability, tracked as CVE-2025-53949, was officially published on December 9, 2025. The security flaw is described as an “OS Command Injection” vulnerability. In […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical OS Command Injection Vulnerability in FortiSandbox Disclosed A critical OS command injection vulnerability has been identified in Fortinet's FortiSandbox platform, allowing attackers to execute arbitrary code and potentially take control of affected systems. The vulnerability, tracked as CVE-2025-53949, was officially published on December 9, 2025, prompting Fortinet to issue a security update to mitigate the risk. 2 sources 38

Extracted Entities

FortiSandbox OS command injection Vulnerability Let Attackers execute Malicious code

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)