// day
Jul 16, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jul 16, 2026
Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability
› Fortinet FortiSandbox
Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests. CISA added CVE-2026-25089, CVE-2026-39808 to the Known Exploited Vulnerabilities catalog on 2026-07-16 based on evidence of active exploitation.
CVE-2026-25089CVE-2026-39808 - highclosedpatchedclosed Jul 16, 2026
Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
› Microsoft SharePoint
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-16.
CVE-2026-58644
