CISA adds Fortinet and Microsoft vulnerabilities to Known Exploited Vulnerabilities catalog
Federal agencies must patch these flaws by July 19, 2026.
1Critical security vulnerabilities identified
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities in Fortinet FortiSandbox and Microsoft SharePoint to its Known Exploited Vulnerabilities (KEV) catalog. These flaws, with a CVSS score of 9.8, are rated as the highest risk level.
2SharePoint remote code execution flaw
The CVE-2026-58644 vulnerability in Microsoft SharePoint allows remote code execution without authentication. This flaw, resulting from deserialization of untrusted data, enables unauthorized code execution over the network. Microsoft has confirmed active exploitation of this vulnerability.
3OS command injection in FortiSandbox
The CVE-2026-25089 and CVE-2026-39808 vulnerabilities in Fortinet FortiSandbox products allow remote execution of OS commands through specially crafted HTTP requests. These flaws enable unauthenticated attackers to execute arbitrary code on affected devices.
4Evidence of active exploitation
Cybersecurity firm Defused Cyber confirmed active exploitation of the FortiSandbox vulnerability within the last 24 hours. Microsoft also stated that the SharePoint flaw is currently being used by malicious actors. This situation underscores the need for immediate action.
5Mandatory patching for federal agencies
CISA has mandated that federal agencies patch these security vulnerabilities by July 19, 2026. Under Binding Operational Directive (BOD) 22-01, Federal Civilian Executive Branch (FCEB) agencies must address these flaws promptly. Private organizations are also advised to review and patch these vulnerabilities.
6Urgent threat to enterprise networks
These security vulnerabilities pose a significant threat, particularly to government agencies and large corporations. Experts warn all organizations to update affected systems and implement additional security measures. Exploitation of these flaws could lead to data breaches and system takeovers.