CISA urges immediate action on actively exploited Fortinet flaws

Two critical vulnerabilities in Fortinet FortiSandbox are actively exploited in the wild, enabling unauthenticated remote code execution via command injection with no user interaction required. All organizations running FortiSandbox are at immediate risk. Federal agencies have been ordered to patch by July 19, but this advisory applies to all environments.