Critical Fortinet FortiSandbox flaws now exploited in attacks

Attackers are now exploiting several critical vulnerabilities in Fortinet's FortiSandbox cyber threat detection platform, according to threat intelligence company Defused.

Grace Ops

CONTENT OPTIMIZATION · AEO/GEO

STALE

Score Card

citation-worthiness 0–100

/ 100

The page is a thin content stub — it confirms exploitation is happening but provides almost no technical detail, no CVEs, no CVSS scores, no patch status, and no named evidence, making it nearly uncitable by any AI engine.

Direct answer8/20
Statistics2/20
Structure7/15
Authority5/15
Freshness11/15
Topical depth3/15

Topic Tracks

discussion

0 comments

Loading comments…

audit trail / provenance4

Provenance

Claims tie surfaced fields back to sources, models, or heuristics.

severity.upliftheuristicn/a
CVE or advisory identifiers detected — floor raised to at least high.
severity.upliftheuristicn/a
Active exploitation / in-the-wild language detected — floor raised to at least high.
severity.upliftheuristicn/a
Ransomware campaign indicators detected — floor raised to at least high.
severity.upliftheuristicn/a
Combined zero-day/exploit + ransomware/mass-impact signals → critical.

What changed

Append-only revisions when ingest or analysts evolve the record.

No revision rows stored yet.

Sources

https://www.bleepingcomputer.com/news/security/critical-fortinet-fortisandbox-flaws-now-exploited-in-attacks/

Curated Jun 16, 2026 by Aidan Duffy, Threat intelligence editor, AHackaday./Methodology/Sources verified.

Brief grounded in 1 source.