CISA Adds Actively Exploited Fortinet FortiSandbox and Microsoft SharePoint Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities in Fortinet FortiSandbox (CVE-2026-25089, CVE-2026-39808) and Microsoft SharePoint (CVE-2026-58644) to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies are mandated to address these flaws by July 19, 2026, as they are actively being exploited.