{"metadata": {"vulnerability": "CVE-2026-39813", "count": 105, "kinds": {"milestone": 8, "sighting": 69, "kev": 9, "other": 19}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0121", "record": "NCSC-2026-0121", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-04-07T15:24:13.846Z", "date_only": false, "value": "2026-04-07T15:24:13.846Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": true, "value": "2026-04-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39813", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39813", "record": "FKIE_CVE-2026-39813", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-14T16:16:45Z", "date_only": false, "value": "2026-04-14T16:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5F64-P6CF-VVQG", "record": "GHSA-5F64-P6CF-VVQG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-14T16:16:45.680Z", "date_only": false, "value": "2026-04-14T16:16:45.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39813", "record": "FKIE_CVE-2026-39813", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T16:34:21.547Z", "date_only": false, "value": "2026-04-14T16:34:21.547909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhspwbtnj2m", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "41369266-f639-4c29-af6e-86dafffe482a", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhspwbtnj2m"}, {"timestamp": "2026-04-14T17:12:45.044Z", "date_only": false, "value": "2026-04-14T17:12:45.044736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhuum6ow52o", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "ef11f7e3-dcc7-468e-b8bf-4f6290b3f4e1", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhuum6ow52o"}, {"timestamp": "2026-04-14T17:28:30Z", "date_only": false, "value": "2026-04-14T17:28:30.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4v-OwtEbw2k7C9XNjCs9sYdvWLQASGI7-ImwzCKuO3D_XeQ", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "e720a6a2-8748-4cb0-9ef7-4a6e0cc4da6f"}, {"timestamp": "2026-04-14T18:30:36Z", "date_only": false, "value": "2026-04-14T18:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5F64-P6CF-VVQG", "record": "GHSA-5F64-P6CF-VVQG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T18:30:36Z", "date_only": false, "value": "2026-04-14T18:30:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5F64-P6CF-VVQG", "record": "GHSA-5F64-P6CF-VVQG", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-14T21:19:22.335Z", "date_only": false, "value": "2026-04-14T21:19:22.335596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3mjicngifvk2s", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "63559a8b-cf3c-4344-ab9c-6e80fcc6998e", "url": "https://bsky.app/profile/rxerium.com/post/3mjicngifvk2s"}, {"timestamp": "2026-04-14T21:19:22.945Z", "date_only": false, "value": "2026-04-14T21:19:22.945273Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3mjicnkkupc2s", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "0b068895-48fa-428a-81c7-d42d84c4b96d", "url": "https://bsky.app/profile/rxerium.com/post/3mjicnkkupc2s"}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "vulnerabilities.5.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": true, "value": "2026-04-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-04-15T01:45:10Z", "date_only": false, "value": "2026-04-15T01:45:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-fortinet-9", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "d10cf0bc-96f6-451e-acfb-74d3c58c191c", "url": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-fortinet-9"}, {"timestamp": "2026-04-15T03:58:20.016Z", "date_only": false, "value": "2026-04-15T03:58:20.016Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39813", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-15T05:23:16Z", "date_only": false, "value": "2026-04-15T05:23:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0121", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "0a99530b-bc8a-4dc6-9391-bbaf751896d3", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0121"}, {"timestamp": "2026-04-15T07:51:27Z", "date_only": false, "value": "2026-04-15T07:51:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-privilege-escalation-fortinet-fortisandbox-patch", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "635f3d1c-bef5-40b0-95a2-3cfa9539c0d4", "url": "https://ccb.belgium.be/advisories/warning-remote-code-execution-privilege-escalation-fortinet-fortisandbox-patch"}, {"timestamp": "2026-04-15T11:05:49.105Z", "date_only": false, "value": "2026-04-15T11:05:49.105502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjjqtffxdf2a", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "e4d321e7-494d-4e75-8ca8-7ab578eb8dff", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mjjqtffxdf2a"}, {"timestamp": "2026-04-15T12:23:16.801Z", "date_only": false, "value": "2026-04-15T12:23:16.801183Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0121", "record": "NCSC-2026-0121", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-15T12:23:16.801Z", "date_only": false, "value": "2026-04-15T12:23:16.801183Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0121", "record": "NCSC-2026-0121", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-15T12:23:16.801Z", "date_only": false, "value": "2026-04-15T12:23:16.801183Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0121", "record": "NCSC-2026-0121", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-04-16T13:53:10.049Z", "date_only": false, "value": "2026-04-16T13:53:10.049829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mjmknh5pi22f", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "37735f60-f629-41d4-bde3-25d0e9c1d5e0", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mjmknh5pi22f"}, {"timestamp": "2026-04-16T17:19:41.305Z", "date_only": false, "value": "2026-04-16T17:19:41.305496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjmw4zfxor22", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "8c5df5d4-b535-42f3-84a0-0d468c6fd3a5", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjmw4zfxor22"}, {"timestamp": "2026-04-16T19:39:10.415Z", "date_only": false, "value": "2026-04-16T19:39:10.415999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjn5y4n7jy2y", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "036936f9-1027-451c-8f59-51a7be866597", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjn5y4n7jy2y"}, {"timestamp": "2026-04-16T20:39:37.590Z", "date_only": false, "value": "2026-04-16T20:39:37.590697Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116416313692288436", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "fa37635f-cafd-44a8-82c9-b7a127be7d5c", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116416313692288436"}, {"timestamp": "2026-04-17T02:41:09.846Z", "date_only": false, "value": "2026-04-17T02:41:09.846941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mjnvktzebt2e", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "4377f8f1-6b78-49e7-9712-19bb16b74a90", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mjnvktzebt2e"}, {"timestamp": "2026-04-18T21:57:08.734Z", "date_only": false, "value": "2026-04-18T21:57:08.734805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjsgmsuuuk2k", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "7146f8d5-1635-4b40-900c-9b9b3bf69cf3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjsgmsuuuk2k"}, {"timestamp": "2026-04-19T22:00:00Z", "date_only": false, "value": "2026-04-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-04-20T20:07:08.179Z", "date_only": false, "value": "2026-04-20T20:07:08.179190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjxbfx7ad52w", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "36bf3fc1-cf0a-4c96-9393-039688c50052", "url": "https://bsky.app/profile/cyberhub.blog/post/3mjxbfx7ad52w"}, {"timestamp": "2026-04-23T20:34:05.467Z", "date_only": false, "value": "2026-04-23T20:34:05.467022Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mk6uct7d7k2q", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "0664f748-8ef6-4579-be33-8781af588873", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mk6uct7d7k2q"}, {"timestamp": "2026-04-23T20:34:55.345Z", "date_only": false, "value": "2026-04-23T20:34:55.345732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mk6ueejzrc2q", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "9ff83edf-9c87-4eed-aa9e-6d500cb024ba", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mk6ueejzrc2q"}, {"timestamp": "2026-04-23T21:00:04Z", "date_only": false, "value": "2026-04-23T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/81446", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "e7971df4-c116-4188-b37e-929feabb0e95", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-23 20:52:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/81446"}, {"timestamp": "2026-04-24T03:00:05Z", "date_only": false, "value": "2026-04-24T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4qDKgTopDS_hPUJyDar22mQk9nYp4NOVSipFWZ2vptLsiDY", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "279c31cf-1203-4e20-960d-9ce41d2a3d5c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-16T06:41:52Z", "date_only": false, "value": "2026-06-16T06:41:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-351", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "87144f1a-acef-4c27-b082-85d0d69b3ad9", "url": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-351"}, {"timestamp": "2026-06-16T08:30:41Z", "date_only": false, "value": "2026-06-16T08:30:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/06/attackers-exploit-three-fortinet.html", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "253f9a08-2043-40d7-ab47-2d1ba0877399", "content": "Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber.\n\nIn a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours.\n\nCVE-2026-39813 (CVSS score: 9.1) refers to a path traversal vulnerability in FortiSandbox JRPC API that could", "url": "https://thehackernews.com/2026/06/attackers-exploit-three-fortinet.html"}, {"timestamp": "2026-06-16T09:27:28.682Z", "date_only": false, "value": "2026-06-16T09:27:28.682688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofian4yxr2k", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "18bee519-f525-4691-ab1b-829b91055776", "content": "Fortinet FortiSandbox\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u306e\u60aa\u7528\u304c\u59cb\u307e\u308b\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused\u306b\u3088\u308b\u3068\u3001Fortinet\u306e\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u691c\u77e5\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cFortiSandbox\u300d\u306b\u5b58\u5728\u3059\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u73fe\u5728\u5b9f\u969b\u306e\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002 Fortinet\u306f4\u670814\u65e5\u3001\u6df1\u523b\u5ea6\u300cCritical\u300d\uff08\u91cd\u5927\uff09\u306b\u5206\u985e\u3055\u308c\u308b3\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-39813\u3001CV", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofian4yxr2k"}, {"timestamp": "2026-06-16T10:15:26.265Z", "date_only": false, "value": "2026-06-16T10:15:26.265112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mofkwddp4r2f", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "6320b781-4003-4d77-ad8b-00f5c5ee999c", "content": "Active attacks target critical Fortinet FortiSandbox flaws, including CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, enabling privilege escalation and RCE without user interaction. #Fortinet #FortiSandbox #CVE2026", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mofkwddp4r2f"}, {"timestamp": "2026-06-16T10:52:37.564Z", "date_only": false, "value": "2026-06-16T10:52:37.564276Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mofmyv3i652j", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "68af7c55-b572-4570-80b3-83313ae8eafc", "content": "Bad actors exploited FortiSandbox vulnerabilities CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 within 24 hours, enabling unauthenticated path traversal and command injection.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mofmyv3i652j"}, {"timestamp": "2026-06-16T11:44:52.285Z", "date_only": false, "value": "2026-06-16T11:44:52.285+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1094", "record": "WID-SEC-W-2026-1094", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-16T11:55:46.115Z", "date_only": false, "value": "2026-06-16T11:55:46.115036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqjs7qtz2a", "record": "cve-2026-39813", "field": "creation_timestamp", "uuid": "4a2c5ad9-d170-4732-85eb-f139228036cf", "content": "\ud83d\udcf0 Fortinet FortiSandbox Dihantam Eksploitasi Massal Celah Keamanan Kritis\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-kritis-fortinet-fortisandbox-dieksploitasi/\n\n#cisa #cve-2026-25089 #cve-2026-39808 #cve-2026-39813 #fortinet #fortisandbox #hacker #jaringan #keaman", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqjs7qtz2a"}, {"timestamp": "2026-06-16T12:00:53.647Z", "date_only": false, "value": "2026-06-16T12:00:53.647520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mofqsxveok2p", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "926f421a-6895-4493-9dd0-95cf84641634", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-39813\n\n\u2022 CVE ID: CVE-2026-39813\n\u2022 CVSS Score: 9.8 (Critical)\n\u2022 Affected: FortiSandbox J\n\nhttps://securitycyber.uk", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mofqsxveok2p"}, {"timestamp": "2026-06-16T13:28:41Z", "date_only": false, "value": "2026-06-16T13:28:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zh_S2vtRGFzTlB-CmmThbMPfLwexNGU4NJPYEXS-uTem0w", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "a56b0413-f4b1-4738-85d3-5c21b22f6bd4"}, {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-39813", "field": "status.status_updated_at", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-16T15:17:57.989Z", "date_only": false, "value": "2026-06-16T15:17:57.989Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-39813", "field": "evidence.0.details.added_date", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-16T15:35:38.811Z", "date_only": false, "value": "2026-06-16T15:35:38.811348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mog4sy37d22h", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "81cd66f9-3596-444a-8ce4-369915a42739", "content": "FortiSandbox\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u653b\u6483\u8005\n\n\u653b\u6483\u8005\u304cFortiSandbox\u306e3\u3064\u306e\u8106\u5f31\u6027\uff08CVE-2026-39813\u3001CVE-2026-39808\u3001CVE-2026-25089\uff09\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002FortiSandbox\u306f\u3001\u4ed6\u306eFortinet\u88fd\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u88fd\u54c1\u304c\u30d6\u30ed\u30c3\u30af\u5224\u5b9a\u306e\u5b9f\u65bd\u3084\u81ea\u52d5\u5bfe\u5fdc\u306e\u30c8\u30ea\u30ac\u30fc\u3068\u3057\u3066\u4f9d\u5b58\u3059\u308b\u8105\u5a01\u8a55\u6c7a", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mog4sy37d22h"}, {"timestamp": "2026-06-16T16:15:34.630Z", "date_only": false, "value": "2026-06-16T16:15:34.630582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mog72ep6fe2r", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "a8ca63de-8c41-437b-a840-d586161ecea1", "content": "~Cybergcca~\nCisco Catalyst SD-WAN Manager and multiple Fortinet products have actively exploited vulnerabilities.\n-\nIOCs: CVE-2026-20262, CVE-2026-39813, CVE-2026-39808\n-\n#Cisco #Fortinet #ThreatIntel", "url": "https://bsky.app/profile/boredchilada.bsky.social/post/3mog72ep6fe2r"}, {"timestamp": "2026-06-16T17:04:50.427Z", "date_only": false, "value": "2026-06-16T17:04:50.427157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mogbsgybam2z", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "9b82aa9c-186b-4a1a-a8c9-8cd476233b92", "content": "Attackers are exploiting three vulnerabilities in Fortinet FortiSandbox: CVE-2026-39813 and CVE-2026-39808, both with a CVSS score of 9.1, involve path traversal and command injection, respectively, allowing unauthenticated access. Both were patched in April 2026.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mogbsgybam2z"}, {"timestamp": "2026-06-16T21:00:00Z", "date_only": false, "value": "2026-06-16T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1926", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "d24fb582-1105-4d69-bf60-63aee396e86c", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1926"}, {"timestamp": "2026-06-17T00:12:21Z", "date_only": false, "value": "2026-06-17T00:12:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-06-17/Angreb-retter-sig-mod-FortiSandbox-saarbarheder", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "85558497-f1c0-4529-a687-bd5d906fd31c", "url": "https://www.cert.dk/news/2026-06-17/Angreb-retter-sig-mod-FortiSandbox-saarbarheder"}, {"timestamp": "2026-06-17T00:55:06.293Z", "date_only": false, "value": "2026-06-17T00:55:06.293756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3moh43dyiqk2t", "record": "cve-2026-39813", "field": "creation_timestamp", "uuid": "3907d6e7-ac95-452b-8037-88ec581b5433", "content": "\u2694\ufe0f ATTACKS Attackers are exploiting FortiSandbox vulnerabilities \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/06/16/fortisandbox-vulnerabilities-cve-2026-39813-cve-2026-39808-cve-2026-25089/ #InfoSec #CyberSecurity", "url": "https://bsky.app/profile/malwareobserver.bsky.social/post/3moh43dyiqk2t"}, {"timestamp": "2026-06-17T04:00:24.993Z", "date_only": false, "value": "2026-06-17T04:00:24.993917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mohggp6udq2t", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "5cf17516-b9da-4c42-a85d-d41c68fec449", "content": "Fortinet FortiSandbox: attackers are exploiting CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089; patch CVE-2026-39813 now and review for active JRPC/path traversal attemp\u2026 #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/06/attackers-exploit-three-fortinet.html", "url": "https://bsky.app/profile/iberianm.bsky.social/post/3mohggp6udq2t"}, {"timestamp": "2026-06-17T07:07:27.155Z", "date_only": false, "value": "2026-06-17T07:07:27.155263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mohquqzh6a2d", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "32890479-9a6a-4bcf-8abc-445f222eef69", "content": "\u6700\u8fd1\u4fee\u6b63\u3055\u308c\u305fFortinet FortiSandbox\u306e\u8106\u5f31\u60273\u4ef6\u3001\u30cf\u30c3\u30ab\u30fc\u306e\u6a19\u7684\u306b\n\n\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused\u306b\u3088\u308b\u3068\u3001\u6700\u8fd1\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u305fFortinet FortiSandbox\u306e\u8106\u5f31\u60273\u4ef6\u304c\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u6a19\u7684\u306b\u3055\u308c\u3066\u3044\u307e\u3059\u3002 Defused\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u3067\u306f\u3001CVE-2026-39808\u3001CVE-2026-39813\u3001CVE-2026-25089\u306e\u60aa\u7528\u3092\u8a66\u307f\u308b\u653b\u6483\u304c\u89b3\u6e2c", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mohquqzh6a2d"}, {"timestamp": "2026-06-17T07:29:37.096Z", "date_only": false, "value": "2026-06-17T07:29:37.096514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mohs2xlhbs35", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "1232b53f-2b4c-4f7d-8be6-c07929431cac", "content": "Fortinet FortiSandbox\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-39813\u3001CVE-2026-39808\u3001CVE-2026-25089\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46235/", "url": "https://bsky.app/profile/shiojiri.com/post/3mohs2xlhbs35"}, {"timestamp": "2026-06-17T14:19:51.945Z", "date_only": false, "value": "2026-06-17T14:19:51.945119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moij2d74dc2h", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "1653454d-ade1-4a18-8da8-45ec88a6b83c", "content": "Attackers are exploiting FortiSandbox vulnerabilities\n\nAttackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products depend on for threat verdicts to enforce blocking \u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3moij2d74dc2h"}, {"timestamp": "2026-06-17T16:00:43.007Z", "date_only": false, "value": "2026-06-17T16:00:43.007036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3moioonwzif27", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "849504b5-5786-42b2-a35f-cba6cdbd9d73", "content": "Twee kritieke kwetsbaarheden in Fortinet FortiSandbox worden momenteel actief do\n\nEr worden twee kritieke kwetsbaarheden in Fortinet FortiSandbox actief door aanvallers uitgebuit: CVE-2026-39808, een OS-command injection kwetsbaarheid, en CVE-2026-39813, een path traversal kwetsbaarheid. For...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3moioonwzif27"}, {"timestamp": "2026-06-17T23:05:11.088Z", "date_only": false, "value": "2026-06-17T23:05:11.088101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mojgfkrems27", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "4d1cb4b3-36d3-4e01-9756-726cd74f6ea5", "content": "Fortinet FortiSandbox\u306e3\u4ef6\u306e\u8106\u5f31\u6027\u304c\u7a4d\u6975\u7684\u306b\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528\u4e2d(CVE-2026-39813\u30fb39808\u30fb25089)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mojgfkrems27"}, {"timestamp": "2026-06-19T11:00:05.155Z", "date_only": false, "value": "2026-06-19T11:00:05.155471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mon6sxhhhu2n", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "23320b95-dda0-4b2d-aeb6-e8fc052e6ab4", "content": "FortiSandbox \u2014 3 critical CVEs actively exploited since June 15. CVE-2026-39813 (CVSS 9.1): no credentials, port 443, full config exfil. Patches available since April. 6-week gap. 3rd Fortinet security tool hit in 2026. Fix: upgrade to 4.4.9+ or 5.0.6+\n #Fortinet #CyberSecurity", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mon6sxhhhu2n"}, {"timestamp": "2026-06-19T12:45:05.624Z", "date_only": false, "value": "2026-06-19T12:45:05.624347Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ac1e9fd-ff69-4974-b0ed-1727d1b8a0d4", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "218caaff-ec66-4e00-b111-caad3ef7a0db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ac1e9fd-ff69-4974-b0ed-1727d1b8a0d4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T19:30:00.163Z", "date_only": false, "value": "2026-06-19T19:30:00.163347Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3moo3csgxk42f", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "4d32b49b-f8ba-4622-a6b1-875c55b34305", "content": "Threat actors are exploiting Fortinet FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089). Stay updated and patch to prevent breaches. #Cybersecurity", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3moo3csgxk42f"}, {"timestamp": "2026-06-22T10:49:19Z", "date_only": false, "value": "2026-06-22T10:49:19+00:00", "kind": "kev", "label": "Asserted", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fee93255-19dd-4e3c-b8ea-5c30109a62bf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-22T10:49:19Z", "date_only": false, "value": "2026-06-22T10:49:19+00:00", "kind": "kev", "label": "First seen", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2026-39813", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fee93255-19dd-4e3c-b8ea-5c30109a62bf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-22T10:49:19Z", "date_only": false, "value": "2026-06-22T10:49:19+00:00", "kind": "kev", "label": "Last seen", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2026-39813", "field": "timestamps.last_seen_at", "uuid": "fee93255-19dd-4e3c-b8ea-5c30109a62bf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-22T10:49:19Z", "date_only": false, "value": "2026-06-22T10:49:19+00:00", "kind": "kev", "label": "Status updated", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2026-39813", "field": "status.status_updated_at", "uuid": "fee93255-19dd-4e3c-b8ea-5c30109a62bf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-22T10:49:37.461Z", "date_only": false, "value": "2026-06-22T10:49:37.461078Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fee93255-19dd-4e3c-b8ea-5c30109a62bf", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "7941c546-51f3-4396-90a7-b5651dd3390f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fee93255-19dd-4e3c-b8ea-5c30109a62bf", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-22T12:00:28.111Z", "date_only": false, "value": "2026-06-22T12:00:28.111725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3moutld5gaj27", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "c7ba5925-4141-4910-8787-141aa7948ddf", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20262, CVE-2026-35273, CVE-2026-39813, CVE-2026-48558, CVE-2026-50656\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "url": "https://bsky.app/profile/aegisbot.bsky.social/post/3moutld5gaj27"}, {"timestamp": "2026-06-22T15:19:35.858Z", "date_only": false, "value": "2026-06-22T15:19:35.858005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mov6psbc7s26", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "af725c7f-579d-41eb-af3e-b14bf1991b6e", "content": "FortiSandbox 3 CVE in exploitation ITW: CVE-2026-39813 (CVSS 9.8, auth bypass JRPC API) + CVE-2026-39808 (OS cmd injection, PoC pubblico aprile). FortiSandbox = verdict-engine di FortiGate/FortiMail/FortiWeb. Fix: 5.0.6/4.4.9 #Fortinet", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mov6psbc7s26"}, {"timestamp": "2026-06-22T20:04:17.765Z", "date_only": false, "value": "2026-06-22T20:04:17.765442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3movomuqbyi2d", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "5dd3aec4-213e-4fac-892b-bb87bd00054c", "content": "~Checkpoint~\nWeekly threat intel highlights FortiSandbox & Splunk zero-days, AI agent exploits, and major breaches at Texas Parks & Klue.\n-\nIOCs: CVE-2026-39813, CVE-2026-50656, CVE-2026-20253\n-\n#DataBreach #ThreatIntel #Vulnerabilities", "url": "https://bsky.app/profile/boredchilada.bsky.social/post/3movomuqbyi2d"}, {"timestamp": "2026-06-22T21:15:13.766Z", "date_only": false, "value": "2026-06-22T21:15:13.766298Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3movslpmknz27", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "46f20f95-755f-4bd9-98bd-4c9ec910523e", "content": "\ud83d\udce1 Fortinet FortiSandbox: Three Critical Vulnerabilities Under Active Attack (CVE-2026-39808, CVE-2026-39813, CVE-2026-25089)", "url": "https://bsky.app/profile/insomnisec.bsky.social/post/3movslpmknz27"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:02:57.186Z", "date_only": false, "value": "2026-06-23T14:02:57.186992Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c9f9de2-5560-4056-9ed6-937928435f16", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "763179c3-4ff4-4217-8118-af50c0c8823c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c9f9de2-5560-4056-9ed6-937928435f16", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T19:11:13.178Z", "date_only": false, "value": "2026-06-23T19:11:13.178159Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116801003102879891", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "18c2e061-a8bb-4b62-9bd4-8eac927684dc", "content": "\ud83d\udcf0 FortiSandbox Vulnerabilities Chained for Root-Level Takeover, Active Exploits in Wild\n\ud83d\udea8 ACTIVE EXPLOITATION: Threat actors are chaining three FortiSandbox vulnerabilities (CVE-2026-39813, et al.) for unauthenticated RCE and full root takeover. Patch immediately to prevent sandbox compromise. #infosec #vulnerability #fortinet\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/exploitation-of-multiple-fortisandbox-vulnerabilities-observed-in-the-wild/?u\u2026", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116801003102879891"}, {"timestamp": "2026-06-23T19:11:43.599Z", "date_only": false, "value": "2026-06-23T19:11:43.599864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moy45riuqj2r", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "f54d31f8-c97a-4b5c-8f29-3e57aa0f4dc3", "content": "\ud83d\udea8 ACTIVE EXPLOITATION: Threat actors are chaining three FortiSandbox vulnerabilities (CVE-2026-39813, et al.) for unauthenticated RCE and full root takeover. Patch immediately to prevent sandbox compromise. #infosec #vulnerability #fortinet\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3moy45riuqj2r"}, {"timestamp": "2026-06-24T09:34:36.994Z", "date_only": false, "value": "2026-06-24T09:34:36.994844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mozmerczap26", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "a0920e0f-45fb-4b2c-a223-5cea86446478", "content": "FortiSandbox Gets Rooted While Everyone Stares at the Dashboard\nPANIC 88% | Lag 0.0h | Threat actors are chaining multiple FortiSandbox vulnerabilities, including CVE-2026-39813, to achie\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mozmerczap26"}, {"timestamp": "2026-06-25T16:45:18.106Z", "date_only": false, "value": "2026-06-25T16:45:18.106835Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "980d8e1d-db16-4835-b8da-1e612054ae39", "url": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet"}, {"timestamp": "2026-07-09T03:00:05.433Z", "date_only": false, "value": "2026-07-09T03:00:05.433962Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2650", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "1c963de4-780f-49a4-b38a-014a112af144", "content": "\ud83d\udea8 Fortinet just disclosed CVE-2026-39808 and CVE-2026-39813 - 2 critical vulnerabilities affecting FortiSandbox. No active exploitation itw reported as of yet.\n\nScan your infrastructure to find vulnerable instances:\nCVE-2026-39808: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39808.yaml\nCVE-2026-39813: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39813.yaml\n\nCVE-2026-39808 (CVSS 9.1):\nAn Improper Neutralization of Special Elements used in an OS Command ('OS command injection') vulnerability [CWE-78] in FortiSandbox may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.\n\nCVE-2026-39813 (CVSS 9.1):\nA Path Traversal vulnerability [CWE-24] in FortiSandbox JRPC API may allow an unauthenticated attacker to bypass authentication via specially crafted HTTP requests.\n\nPatches are available as per vendor advisories:\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-112\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-100", "url": "https://t.me/brutsecurity/2650"}, {"timestamp": "2026-07-11T10:00:05.690Z", "date_only": false, "value": "2026-07-11T10:00:05.690798Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2650", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "87e67983-6eb0-4812-b398-d0167b31661e", "content": "\ud83d\udea8 Fortinet just disclosed CVE-2026-39808 and CVE-2026-39813 - 2 critical vulnerabilities affecting FortiSandbox. No active exploitation itw reported as of yet.\n\nScan your infrastructure to find vulnerable instances:\nCVE-2026-39808: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39808.yaml\nCVE-2026-39813: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39813.yaml\n\nCVE-2026-39808 (CVSS 9.1):\nAn Improper Neutralization of Special Elements used in an OS Command ('OS command injection') vulnerability [CWE-78] in FortiSandbox may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.\n\nCVE-2026-39813 (CVSS 9.1):\nA Path Traversal vulnerability [CWE-24] in FortiSandbox JRPC API may allow an unauthenticated attacker to bypass authentication via specially crafted HTTP requests.\n\nPatches are available as per vendor advisories:\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-112\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-100", "url": "https://t.me/brutsecurity/2650", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T00:18:02.968Z", "date_only": false, "value": "2026-07-12T00:18:02.968699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfvnysdw22i", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "585c9286-df43-4276-8adf-17ceec8f745a", "content": "Fortinet FortiSandbox\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u73fe\u5728\u3001Fortinet\u306eFortiSandbox\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u691c\u51fa\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306b\u5b58\u5728\u3059\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3002\n\nFortinet\u306f\u30014\u670814\u65e5\u30686\u67089\u65e5\u306b\u3001\u3053\u308c\u30893\u3064\u306e\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\uff08CVE-2026-39813\u3001CVE-2026-39808\u3001CVE-2026-25089\u3068\u3057\u3066\u8ffd\u8de1\uff09\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u4f4e\u8907\u96d1\u5ea6\u306e\u30b3\u30de\u30f3\u30c9...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfvnysdw22i"}, {"timestamp": "2026-07-12T00:27:23.775Z", "date_only": false, "value": "2026-07-12T00:27:23.775238Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfw6qvgsk2i", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "c1b1f2bc-453b-4df6-b97b-2463c7fd4f4e", "content": "\u653b\u6483\u8005\u304cFortinet FortiSandbox\u306e3\u3064\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001\u3046\u30611\u3064\u306f\u5148\u9031\u4fee\u6b63\u6e08\u307f\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused Cyber\u200b\u200b\u306b\u3088\u308b\u3068\u3001\u60aa\u610f\u306e\u3042\u308b\u653b\u6483\u8005\u304cFortinet FortiSandbox\u306e\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3002\n\nX\u3067\u5171\u6709\u3055\u308c\u305f\u6295\u7a3f\u306e\u4e2d\u3067\u3001\u540c\u793e\u306f\u904e\u53bb24\u6642\u9593\u4ee5\u5185\u306bCVE-2026-39813\u3001CVE-2026-39808\u3001\u304a\u3088\u3073CVE-2026-25089\u306e\u60aa\u7528\u3092\u78ba\u8a8d\u3057\u305f\u3068\u8ff0\u3079\u305f\u3002\n\nCVE-2026-39813\uff08CVSS\u30b9\u30b3\u30a2\uff1a9.1\uff09\u306f\u3001FortiSandbox JRPC API\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u3092\u6307\u3057\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfw6qvgsk2i"}, {"timestamp": "2026-07-12T00:58:16.500Z", "date_only": false, "value": "2026-07-12T00:58:16.500240Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfxvycd4k2i", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "29ff4a9d-e037-410b-be9a-856f301593b5", "content": "\u30cf\u30c3\u30ab\u30fc\u304cFortinet FortiSandbox\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u3092\u4ed5\u639b\u3051\u308b\n\n\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u3089\u306f\u3001Fortinet FortiSandbox\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u6a19\u7684\u3068\u3057\u305f\u653b\u6483\u304c\u6d3b\u767a\u306b\u884c\u308f\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u5831\u544a\u3057\u3066\u304a\u308a\u3001\u4f01\u696d\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u306e\u6f5c\u5728\u7684\u306a\u4fb5\u5bb3\u306b\u5bfe\u3059\u308b\u61f8\u5ff5\u304c\u9ad8\u307e\u3063\u3066\u3044\u308b\u3002\n\nDefused Cyber\u200b\u200b\u304c\u5171\u6709\u3057\u305f\u8105\u5a01\u60c5\u5831\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u904e\u53bb24\u6642\u9593\u4ee5\u5185\u306b\u3001CVE-2026-39813\u3001CVE-2026-39808\u3001CVE-2026-25089\u306a\u3069\u3001\u65b0\u305f\u306b\u516c\u958b\u3055\u308c\u305f\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfxvycd4k2i"}, {"timestamp": "2026-07-13T12:20:45.082Z", "date_only": false, "value": "2026-07-13T12:20:45.082166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjojbbm2c2o", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "739273cd-105a-4ef1-8d3b-ebd049d7c7e8", "content": "Fortinet\u793e\u306f\u3001FortiSandbox\u306e3\u3064\u306e\u91cd\u5927\u306a\u30d0\u30b0\u304c\u653b\u6483\u3092\u53d7\u3051\u3066\u3044\u308b\u3068\u3057\u3066\u8b66\u544a\u3092\u53d7\u3051\u305f\u3002\n\n\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eDefused Cyber\u200b\u200b\u306f\u3001Fortinet FortiSandbox\u306e3\u3064\u306e\u8106\u5f31\u6027\u304c24\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3002\u305d\u306e\u3046\u30612\u3064\u306f4\u6708\u304b\u3089\u30d1\u30c3\u30c1\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u305f\u30023\u3064\u76ee\u306f\u5148\u9031\u4fee\u6b63\u3055\u308c\u305f\u304c\u3001\u3069\u3046\u3084\u3089\u5bfe\u5fdc\u304c\u9045\u3059\u304e\u305f\u3088\u3046\u3060\u3002\n\nCVE-2026-39813\uff08CVSS\u30b9\u30b3\u30a2\uff1a9.1\uff09\u306f\u3001FortiSandbox JRPC API\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u7279\u5225\u306b\u7d30\u5de5\u3055\u308c\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4ecb\u3057\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u53ef...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjojbbm2c2o"}, {"timestamp": "2026-07-13T12:39:42.223Z", "date_only": false, "value": "2026-07-13T12:39:42.223501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjpl4px7s2o", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "8e8f1eaa-96e4-4027-9da8-b94275de1bb7", "content": "\u6700\u8fd1\u4fee\u6b63\u3055\u308c\u305fFortinet FortiSandbox\u306e3\u3064\u306e\u8106\u5f31\u6027\u304c\u30cf\u30c3\u30ab\u30fc\u306e\u6a19\u7684\u306b\n\nDefused\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u3067\u306f\u3001CVE-2026-39808\u3001CVE-2026-39813\u3001\u304a\u3088\u3073CVE-2026-25089\u3092\u60aa\u7528\u3057\u3088\u3046\u3068\u3059\u308b\u8a66\u307f\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \n\nCVE-2026-39813\u3068CVE-2026-39808\u306f\u3069\u3061\u3089\u3082\u300c\u91cd\u5927\u5ea6\uff1a\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u8a55\u4fa1\u3055\u308c\u30014\u6708\u306b\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u307e\u3057\u305f\u3002\u524d\u8005\u306f\u653b\u6483\u8005\u304c\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u5f8c\u8005\u306fOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3067\u3001\u60aa\u7528\u3055\u308c\u308b\u3068\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3084\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 \n\nCVE-2026-25089\u306f\u3001 Fo...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjpl4px7s2o"}, {"timestamp": "2026-07-13T13:00:08.384Z", "date_only": false, "value": "2026-07-13T13:00:08.384378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8310", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "6fa0d133-25c8-4ce1-8be7-d95bb1863997", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defused \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u044f\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 FortiSandbox \u043e\u0442 Fortinet.\n\n14 \u0430\u043f\u0440\u0435\u043b\u044f Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-39813, CVE-2026-39808 \u0438 CVE-2026-25089.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0430\u0442\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u0432 Defused, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Fortinet FortiSandbox, \u0432\u043a\u043b\u044e\u0447\u0430\u044f: CVE-2026-39813 (\u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438), CVE-2026-39808, CVE-2026-25089 (\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0435\u0449\u0435 \u043d\u0435 \u0431\u044b\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Fortinet \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortinet \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u00a0\u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c ransowmare\u00a0(\u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0432 \u0432\u0438\u0434\u0435 \u043d\u0443\u043b\u0435\u0439) \u0438 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445\u00a0\u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430\u00a0\u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0435\u0439 \u0436\u0435\u0440\u0442\u0432.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043a\u0430\u0440\u0430\u043d\u0434\u0430\u0448\u0435 \u0432 CISA \u0441\u0435\u0439\u0447\u0430\u0441 26 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Fortinet, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b, 13 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.", "url": "https://t.me/true_secator/8310"}, {"timestamp": "2026-07-13T22:00:41.039Z", "date_only": false, "value": "2026-07-13T22:00:41.039339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/89189", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "a5e6c66f-7256-4f40-b4d1-1221f83368e8", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 01:41:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39813 - Fortinet Sandbox - Draft \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89189"}, {"timestamp": "2026-07-15T00:00:07.967Z", "date_only": false, "value": "2026-07-15T00:00:07.967196Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/89189", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "4fa7ab7f-f75a-4d6f-9c6a-ad06e3da184a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 01:41:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39813 - Fortinet Sandbox - Draft \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89189", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-17T12:00:05.656Z", "date_only": false, "value": "2026-07-17T12:00:05.656164Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6427", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "7e8bf0b1-591e-44b6-a38d-4d1acc310569", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defused \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u044f\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 FortiSandbox \u043e\u0442 Fortinet.\n\n14 \u0430\u043f\u0440\u0435\u043b\u044f Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-39813, CVE-2026-39808 \u0438 CVE-2026-25089.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0430\u0442\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u0432 Defused, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Fortinet FortiSandbox, \u0432\u043a\u043b\u044e\u0447\u0430\u044f: CVE-2026-39813 (\u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438), CVE-2026-39808, CVE-2026-25089 (\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0435\u0449\u0435 \u043d\u0435 \u0431\u044b\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Fortinet \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortinet \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u00a0\u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c ransowmare\u00a0(\u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0432 \u0432\u0438\u0434\u0435 \u043d\u0443\u043b\u0435\u0439) \u0438 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445\u00a0\u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430\u00a0\u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0435\u0439 \u0436\u0435\u0440\u0442\u0432.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043a\u0430\u0440\u0430\u043d\u0434\u0430\u0448\u0435 \u0432 CISA \u0441\u0435\u0439\u0447\u0430\u0441 26 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Fortinet, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b, 13 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.", "url": "https://t.me/S_E_Reborn/6427"}, {"timestamp": "2026-08-21T23:00:12.009Z", "date_only": false, "value": "2026-08-21T23:00:12.009284Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1510", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "e21c7010-0ed9-4e5e-b01a-5b75a54ac8f7", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/1510"}, {"timestamp": "2026-08-23T00:00:41.557Z", "date_only": false, "value": "2026-08-23T00:00:41.557767Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/1510", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "d0e60a64-0395-44ce-b47a-f55f610494aa", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/1510", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T17:30:38.386Z", "date_only": false, "value": "2026-09-25T17:30:38.386612Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117332865049887353", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "7d299255-934d-425a-aa44-f8b9495f33da", "content": "If you missed this, Fortinet posted advisories for two critical vulnerabilities yesterday - CVE-2026-39813 and CVE-2026-39808 https://app.opencve.io/cve/?vendor=fortinet #infosec #Fortinet #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117332865049887353"}, {"timestamp": "2026-11-06T15:42:16.642Z", "date_only": false, "value": "2026-11-06T15:42:16.642Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-06T15:42:16.642Z", "date_only": false, "value": "2026-11-06T15:42:16.642Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2026-39813", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T16:18:15.760Z", "date_only": false, "value": "2026-11-06T16:18:15.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39813", "record": "FKIE_CVE-2026-39813", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-06T18:24:23.933Z", "date_only": false, "value": "2026-11-06T18:24:23.933383Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117570893469764884", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "e50b8246-f409-4dd0-878a-03c7987378ad", "content": "Fortinet has several advisories today. Three of them relate to critical vulnerabilities.\nCRITICAL: CVE-2026-84388:Improper Restriction of Rendered UI Layers or Frames in FortiPAM Chrome Extension Enables Remote Information Disclosure https://app.opencve.io/cve/CVE-2026-84388\nCRITICAL: CVE-2026-44277: Improper access control vulnerability in Fortinet FortiAuthenticator appliances https://app.opencve.io/cve/CVE-2026-44277\nCRITICAL: CVE-2026-39813: Directory Traversal Allowing Privilege Escalation in FortiSandbox https://app.opencve.io/cve/CVE-2026-39813 @fortinet \nMore: https://app.opencve.io/cve/?vendor=fortinet #infosec #vulnerability #Fortinet", "url": "https://infosec.exchange/users/AAKL/statuses/117570893469764884"}, {"timestamp": "2026-11-12T07:10:18Z", "date_only": false, "value": "2026-11-12T07:10:18.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39813.yaml", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "fe3fc120-de08-4532-af34-24e7c40fe9e8", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39813.yaml"}], "metrics": {"as_of": "2026-11-15T00:32:25.607Z", "anchors": {"origin": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-24T03:00:05Z", "date_only": false, "value": "2026-04-24T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4qDKgTopDS_hPUJyDar22mQk9nYp4NOVSipFWZ2vptLsiDY", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "279c31cf-1203-4e20-960d-9ce41d2a3d5c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 5441966.689, "hours": 1511.6574136111112, "days": 62.985725567129634, "min_seconds": 5441966.689, "max_seconds": 5441966.689, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 5441966.689, "hours": 1511.6574136111112, "days": 62.985725567129634, "min_seconds": 5441966.689, "max_seconds": 5441966.689, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 818494.689, "hours": 227.35963583333333, "days": 9.473318159722222, "min_seconds": 818494.689, "max_seconds": 818494.689, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-24T03:00:05Z", "date_only": false, "value": "2026-04-24T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4qDKgTopDS_hPUJyDar22mQk9nYp4NOVSipFWZ2vptLsiDY", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "279c31cf-1203-4e20-960d-9ce41d2a3d5c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18521635.296249, "hours": 5144.8986934025, "days": 214.3707788917708, "min_seconds": 18521635.296249, "max_seconds": 18521635.296249, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T15:38:30.311Z", "date_only": false, "value": "2026-04-14T15:38:30.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:32:25.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 13079668.607249, "hours": 3633.2412797913885, "days": 151.3850533246412, "min_seconds": 13079668.607249, "max_seconds": 13079668.607249, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-16T15:17:57Z", "date_only": false, "value": "2026-06-16T15:17:57+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39813", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5c9f9de2-5560-4056-9ed6-937928435f16", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T00:32:25.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 17703140.607249, "hours": 4917.539057569166, "days": 204.89746073204861, "min_seconds": 17703140.607249, "max_seconds": 17703140.607249, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-24T03:00:05Z", "date_only": false, "value": "2026-04-24T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4qDKgTopDS_hPUJyDar22mQk9nYp4NOVSipFWZ2vptLsiDY", "record": "CVE-2026-39813", "field": "creation_timestamp", "uuid": "279c31cf-1203-4e20-960d-9ce41d2a3d5c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:32:25.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}