
CVE-2026-25089 FortiSandbox Unauthenticated Command Injection: Inside the CISA KEV Addition, Detection Scripts, and Hardening Playbook
FortiSandbox’s Start VNC feature concatenates user-controlled JSON fields into shell commands without neutralization, letting …





