Fortinet, Ivanti, and SAP have issued security patches to address several critical security vulnerabilities that could lead to arbitrary code execution and information disclosure.
The security flaw resolved by Fortinet involves a command injection vulnerability in the WEB UI of FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS. It is identified as CVE-2026-25089 (CVSS score: 9.1).
"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests," Fortinet stated.
The issue affects the following products and versions:
FortiSandbox 5.0.0 through 5.0.5 (Upgrade to 5.0.6 or above)
FortiSandbox 4.4.0 through 4.4.8 (Upgrade to 4.4.9 or above)
FortiSandbox Cloud 5.0.4 through 5.0.5 (Upgrade to 5.0.6 or above)
FortiSandbox PaaS 5.0.4 through 5.0.5 (Upgrade to 5.0.6 or above)
On Tuesday, Ivanti also released fixes for two critical security flaws impacting Ivanti Sentry (formerly MobileIron Sentry):
CVE-2026-10520 (CVSS score: 10.0) - An operating system command injection vulnerability in versions before R10.5.2, R10.6.2, and R10.7.1 that enables a remote unauthenticated user to achieve root-level remote code execution.
CVE-2026-10523 (CVSS score: 9.9) - An authentication bypass vulnerability in versions before R10.5.2, R10.6.2, and R10.7.1 that allows a remote unauthenticated attacker to create arbitrary administrative accounts and gain full administrative access.
watchTowr Labs, which released additional details about CVE-2026-10520, stated that an attacker could exploit the flaw by sending a specially crafted HTTP request to the "/mics/api/v2/sentry/mics-config/handleMessage" endpoint, which is then interpreted as a MICS configuration command and executed by a backend component called "handleExecute()."
The patch delivered by Ivanti includes additional controls that block access to the vulnerable endpoint, redirecting unauthenticated requests to the login page.
"Ivanti did not just remove attacker control over the vulnerable execution path," security researcher Sonny Macdonald explained. "They also added a layer of protection in front of it to make reaching the endpoint significantly more difficult. In other words: they added authentication."
Rounding out the list of updates is SAP, which issued fixes for four critical vulnerabilities in NetWeaver AS ABAP and ABAP Platform, as well as SAP Commerce Cloud and SAP Data Hub:
CVE-2026-44748 (CVSS score: 9.9) - XML signature wrapping vulnerability in SAML authentication in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-27671 (CVSS score: 9.8) - Memory corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
CVE-2026-22732 (CVSS score: 9.1) - Potential Spring security vulnerability within SAP Commerce Cloud and SAP Data Hub
CVE-2026-40128 (CVSS score: 9.0) - Directory traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
"The application allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents with tampered identity information to the verifier," SAP security firm Onapsis stated.
"Due to an improper XML signature verification, the manipulated identity information is accepted, leading to unauthorized access to sensitive user data and potential disruption of normal system usage."
Regarding CVE-2026-27671, the flaw permits an unauthenticated attacker to send a crafted RFC request that exploits how the SAP kernel validates the RFC protocol, resulting in memory corruption.
There is no evidence that any of the aforementioned vulnerabilities have been exploited in the wild. However, it is always a safe practice to update to the latest version for optimal protection.
Update
In a post shared on X, the Shadowserver Foundation reported that it is "observing a large amount of Ivanti Sentry CVE-2026-10520 exploitation attempts based on the public [proof-of-concept]," with at least two vulnerable instances backdoored. Ivanti has yet to update the advisory to reflect the exploitation status.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on June 11, 2026, added the Ivanti Sentry flaw to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 14.
"CVE-2026-10520 resides in the ConfigServiceController class within the Sentry web application, which is accessible via a POST request to the unauthenticated endpoint /mics/api/v2/sentry/mics-config/handleMessage," Rapid7 stated, describing the flaw as trivial to exploit.
"The handleMessage endpoint accepts an attacker supplied message parameter that is parsed as an internal configuration command. This ultimately results in arbitrary OS command execution as root with an attacker control OS command."
In an update to its advisory on June 12, Ivanti stated that CISA added the vulnerability to its KEV catalog following reports of attempted exploitation against honeypot systems.
"It is important for customers to know that exploitation of CVE-2026-10520 requires access to the management port (8443)," the company said. "Management interfaces should never be exposed to the internet, though honeypots often have misconfigurations to identify malicious behavior."
CISA also noted that the security flaw can be successfully exploited only in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. "The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors," the agency stated.
(The story was updated after publication to reflect the latest developments.)