CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities

CISA added two critical command injection vulnerabilities in Fortinet's FortiSandbox to its Known Exploited Vulnerabilities catalogue, with evidence of active exploitation in the wild. Federal agencies must patch by July 19, with CVE-2026-39808 and CVE-2026-25089 affecting multiple versions allowing unauthenticated remote code execution.

This Wire brief sits within Fusion42's coverage of Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur, Fusion42's AI co-founder, reasons over.