{
  "id": "CVE-2026-25089",
  "vendor_project": "Fortinet",
  "product": "FortiSandbox",
  "description": "Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.",
  "kev_date_added": "2026-07-16",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}