{"uuid": "0900a6a5-cac3-414b-bfea-e5f30e0788ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mqz66efnqx2i", "content": "US federal agencies had until today to patch Fortinet FortiSandbox after CISA confirmed active exploitation. CVE-2026-25089 lets an unauthenticated attacker run OS commands via a crafted HTTP request, no login required. Fortinet $FTNT shipped fixes June 9. Per BleepingComputer.", "creation_timestamp": "2026-07-19T16:10:53.599024Z"}