Critical OS Command Injection Vulnerability in FortiSandbox Disclosed

First seen 10 Dec 2025, 13:46 UTC • Cybersecuritynews

•38

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical OS command injection vulnerability has been identified in Fortinet's FortiSandbox platform, allowing attackers to execute arbitrary code and potentially take control of affected systems. The vulnerability, tracked as CVE-2025-53949, was officially published on December 9, 2025, prompting Fortinet to issue a security update to mitigate the risk.

How this analysis works

Attack Flow

Continue Reading

Exploitation of FortiGate SSO Vulnerabilities by Threat Actors Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation GRU Compromises Home Routers in 23 States to Steal Outlook Credentials FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Critical Check Point VPN Vulnerability Exploited by Ransomware Gang Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

Critical OS Command Injection Vulnerability in FortiSandbox Disclosed

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading