Critical Fortinet FortiSandbox Vulnerabilities Exploited in the Wild

Threat actors have begun actively exploiting multiple critical Fortinet FortiSandbox vulnerabilities within the past 24 hours, including CVE-2026-39813 a flaw with no previously recorded in-the-wild exploitation. Security researchers observing honeypot activity have detected exploitation attempts originating from IP address 141.11.43.175, attributed to ASN AS136510, targeting decoy FortiSandbox infrastructure over port 443 via crafted JSONRPC POST requests. Critical Fortinet…