Related Threat Clusters
-
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…
50 articles · Updated July 15, 2026 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild
The inaugural July 2026 InfraTrust Pulse report reveals critical vulnerabilities affecting infrastructure devices, particularly SonicWall's SMA1000 and Fortinet's FortiSandbox. SonicWall's CVE-2026-15409 and…
6 articles · Updated July 22, 2026 -
Critical RCE Vulnerabilities Discovered in Fortinet Products
Fortinet has identified multiple critical vulnerabilities in its FortiSandbox and FortiAuthenticator products, which could allow unauthenticated attackers to execute arbitrary code remotely. The vulnerabilities are…
107 articles · Updated May 12, 2026 -
Langflow IDOR Exploit and Critical Vulnerabilities Targeting AI Platforms
A moderate-scored IDOR vulnerability (CVE-2026-55255) in Langflow has been actively exploited since June 25, 2026, allowing attackers to access and execute flows belonging to other users. This exploit leverages a…
5 articles · Updated July 25, 2026 -
Fortinet Issues Security Advisory for Critical Vulnerabilities
On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote…
88 articles · Updated March 10, 2026 -
Critical OS Command Injection Vulnerability in FortiSandbox Disclosed
A critical OS command injection vulnerability has been identified in Fortinet's FortiSandbox platform, allowing attackers to execute arbitrary code and potentially take control of affected systems. The vulnerability,…
2 articles · Updated December 10, 2025 -
Fortinet Discloses XSS Vulnerability in FortiSandbox Platform
Fortinet has announced a high-severity cross-site scripting (XSS) vulnerability in its FortiSandbox platform, identified as CVE-2025-52436. This flaw allows unauthenticated attackers to execute arbitrary commands on…
2 articles · Updated February 10, 2026 -
Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited
Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…
74 articles · Updated November 28, 2025 -
FortiSandbox SSRF Vulnerability Disclosed, Affects Internal Traffic Proxying
Fortinet disclosed a Server-Side Request Forgery (SSRF) vulnerability in its FortiSandbox appliance on January 13, 2026. The vulnerability, tracked as CVE-2025-67685, allows authenticated attackers to craft HTTP…
2 articles · Updated January 14, 2026
Recent Intelligence Reports
- >> Read this brief on krypteiasec.com — krypteiasec.com · July 26, 2026
- Daily Threat Brief: July 24, 2026 — Buttondown · July 25, 2026
- InfraTrust Pulse July 2026: What Infrastructure to Patch First — pulse.infra-trust.org · July 23, 2026
- FG-IR-26-141 — fortiguard.fortinet.com · July 23, 2026
- FG-IR-26-100 — fortiguard.fortinet.com · July 23, 2026
- Fortinet patches eleven security vulnerabilities in several products — Heise.De · May 13, 2026
- Critical Fortinet vulnerabilities fixed in FortiSandbox and FortiAuthenticator — Securityaffairs.Co · May 13, 2026
- Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution — Cisecurity · May 12, 2026