<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-29T15:43:03.787571+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9322811-ae3b-46bd-a18e-091715bbadb0/export</id>
    <title>c9322811-ae3b-46bd-a18e-091715bbadb0</title>
    <updated>2026-06-29T15:43:03.808128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9322811-ae3b-46bd-a18e-091715bbadb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mpgl4nyw7227", "content": "\ud83d\udea8 In this week\u2019s newsletter, we cover CVE-2026-39808, a critical OS command injection vulnerability in Fortinet FortiSandbox now in early exploitation. \n\nRead the full analysis and protect your systems \ud83d\udc49 www.crowdsec.net/vulntracking...", "creation_timestamp": "2026-06-29T13:15:45.763619Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9322811-ae3b-46bd-a18e-091715bbadb0/export"/>
    <published>2026-06-29T13:15:45.763619+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6090e0c4-ce9e-446b-8812-96d7a01a56b9/export</id>
    <title>6090e0c4-ce9e-446b-8812-96d7a01a56b9</title>
    <updated>2026-06-29T15:43:03.811944+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "6090e0c4-ce9e-446b-8812-96d7a01a56b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:15.715266Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6090e0c4-ce9e-446b-8812-96d7a01a56b9/export"/>
    <published>2026-06-25T16:45:15.715266+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fd6d4a55-853e-4444-bed6-cb88dc8359db/export</id>
    <title>fd6d4a55-853e-4444-bed6-cb88dc8359db</title>
    <updated>2026-06-29T15:43:03.813987+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fd6d4a55-853e-4444-bed6-cb88dc8359db", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efcc9691-84cb-45c2-9e5d-5a03fcc9654a", "content": "", "creation_timestamp": "2026-06-23T14:02:57.907367Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fd6d4a55-853e-4444-bed6-cb88dc8359db/export"/>
    <published>2026-06-23T14:02:57.907367+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c3d0888f-25e2-44ee-b88b-b5d633aabb58/export</id>
    <title>c3d0888f-25e2-44ee-b88b-b5d633aabb58</title>
    <updated>2026-06-29T15:43:03.814120+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c3d0888f-25e2-44ee-b88b-b5d633aabb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3movslpmknz27", "content": "\ud83d\udce1 Fortinet FortiSandbox: Three Critical Vulnerabilities Under Active Attack (CVE-2026-39808, CVE-2026-39813, CVE-2026-25089)", "creation_timestamp": "2026-06-22T21:15:13.602537Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c3d0888f-25e2-44ee-b88b-b5d633aabb58/export"/>
    <published>2026-06-22T21:15:13.602537+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d4d54302-de2d-444e-a68d-ab105229d0fb/export</id>
    <title>d4d54302-de2d-444e-a68d-ab105229d0fb</title>
    <updated>2026-06-29T15:43:03.814224+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d4d54302-de2d-444e-a68d-ab105229d0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mov6psbc7s26", "content": "FortiSandbox 3 CVE in exploitation ITW: CVE-2026-39813 (CVSS 9.8, auth bypass JRPC API) + CVE-2026-39808 (OS cmd injection, PoC pubblico aprile). FortiSandbox = verdict-engine di FortiGate/FortiMail/FortiWeb. Fix: 5.0.6/4.4.9 #Fortinet", "creation_timestamp": "2026-06-22T15:19:36.060416Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d4d54302-de2d-444e-a68d-ab105229d0fb/export"/>
    <published>2026-06-22T15:19:36.060416+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec184fac-8a88-464c-8725-ae9601b9dad6/export</id>
    <title>ec184fac-8a88-464c-8725-ae9601b9dad6</title>
    <updated>2026-06-29T15:43:03.814321+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec184fac-8a88-464c-8725-ae9601b9dad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3moo3csgxk42f", "content": "Threat actors are exploiting Fortinet FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089). Stay updated and patch to prevent breaches. #Cybersecurity", "creation_timestamp": "2026-06-19T19:30:00.371866Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec184fac-8a88-464c-8725-ae9601b9dad6/export"/>
    <published>2026-06-19T19:30:00.371866+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1775191f-b1bf-4b18-91af-e60df922795d/export</id>
    <title>1775191f-b1bf-4b18-91af-e60df922795d</title>
    <updated>2026-06-29T15:43:03.814428+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1775191f-b1bf-4b18-91af-e60df922795d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f40990c2-c279-416a-8ef4-0fd46af15a9c", "content": "", "creation_timestamp": "2026-06-19T12:45:07.034885Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1775191f-b1bf-4b18-91af-e60df922795d/export"/>
    <published>2026-06-19T12:45:07.034885+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f1aa1bcf-d11a-4f07-a117-55107d52a250/export</id>
    <title>f1aa1bcf-d11a-4f07-a117-55107d52a250</title>
    <updated>2026-06-29T15:43:03.814525+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f1aa1bcf-d11a-4f07-a117-55107d52a250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3moioonwzif27", "content": "Twee kritieke kwetsbaarheden in Fortinet FortiSandbox worden momenteel actief do\n\nEr worden twee kritieke kwetsbaarheden in Fortinet FortiSandbox actief door aanvallers uitgebuit: CVE-2026-39808, een OS-command injection kwetsbaarheid, en CVE-2026-39813, een path traversal kwetsbaarheid. For...", "creation_timestamp": "2026-06-17T16:00:42.835038Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f1aa1bcf-d11a-4f07-a117-55107d52a250/export"/>
    <published>2026-06-17T16:00:42.835038+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b01d559-1cb4-427f-a927-ae49d3212c0b/export</id>
    <title>7b01d559-1cb4-427f-a927-ae49d3212c0b</title>
    <updated>2026-06-29T15:43:03.814627+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b01d559-1cb4-427f-a927-ae49d3212c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moij2d74dc2h", "content": "Attackers are exploiting FortiSandbox vulnerabilities\n\nAttackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products depend on for threat verdicts to enforce blocking \u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T14:19:52.094837Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b01d559-1cb4-427f-a927-ae49d3212c0b/export"/>
    <published>2026-06-17T14:19:52.094837+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/165bfb3e-a845-4c13-a5ae-039c56f8631f/export</id>
    <title>165bfb3e-a845-4c13-a5ae-039c56f8631f</title>
    <updated>2026-06-29T15:43:03.814723+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "165bfb3e-a845-4c13-a5ae-039c56f8631f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mohweb3xs52t", "content": "Three Fortinet FortiSandbox flaws, including CVE-2026-39808, are reportedly under active exploitation, alongside attacks on FortiClient EMS. SOCRadar also links FortiBleed to 30,000+ compromised devices. #Fortinet #FortiSandbox #FortiBleed", "creation_timestamp": "2026-06-17T08:45:22.819132Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/165bfb3e-a845-4c13-a5ae-039c56f8631f/export"/>
    <published>2026-06-17T08:45:22.819132+00:00</published>
  </entry>
</feed>
