Critical SharePoint, Fortinet, and Oracle Flaws Under Active Attack

Let me ask you something: when you leave your office for the day, do you double-check that the front door is locked?

Of course you do. It’s second nature. You wouldn't dream of leaving the keys in the lock or the windows wide open.

But right now, for many small businesses, it’s like the back door was built with a lock that anyone with a specific "skeleton key" can open. And the worst part? Hackers are already walking through those doors.

The Cybersecurity and Infrastructure Security Agency (CISA) recently updated its "Known Exploited Vulnerabilities" list. This isn't a list of "maybe" threats. These are flaws that hackers are actively using to break into businesses just like yours.

From SharePoint to Fortinet firewalls, the tools you rely on every day are currently under fire.

The "Master Key" Flaws: Fortinet and SharePoint

Imagine if someone could walk up to your building, whisper a specific phrase to the intercom, and the door just clicked open. No ID, no password, no effort.

That is exactly what’s happening with Fortinet FortiSandbox (CVE-2026-25089 and CVE-2026-39808). These are "unauthenticated remote code execution" (RCE) flaws.

In plain English? A hacker doesn't need a username or a password to take over the system. They just send a specifically crafted request over the internet, and suddenly, they are the ones running the show.

And then there's Microsoft SharePoint.

You likely use SharePoint to store your most sensitive company documents. Right now, a dangerous "exploitation chain" is making the rounds. It works like a three-step heist:

The Bypass (CVE-2026-32201): The hacker tricks the system into thinking they belong there.
The Entry (CVE-2026-45659): Once "inside," they run their own malicious code.
The Takeover (CVE-2026-56164): They escalate their permissions until they have total control over your data.

It’s not just a single hole in the fence; it’s a coordinated attack designed to strip away every layer of your security.

A close-up of a high-tech network firewall appliance with glowing status lights in a professional server room

The Vault Heist: Oracle and SonicWall

If SharePoint is where you keep your files, Oracle E-Business Suite is often where the money lives.

A new flaw (CVE-2026-46817) has been discovered with a nearly perfect "danger score" of 9.8 out of 10. This vulnerability allows an unauthenticated attacker to take over "Oracle Payments."

Think about that for a second. That's sensitive financial data leaving the safety of your business and falling into the hands of someone who shouldn't even have access to your login screen.

We are also seeing active attacks on:

SonicWall SMA1000 (CVE-2026-15409): Your "secure" remote access points might actually be providing a path for intruders.
Microsoft AD FS (CVE-2026-56155): The system that manages how your employees log in to various apps is being targeted.
Rockwell Automation (ICSA-26-197-06): Even industrial systems are seeing "Denial of Service" attacks that can shut down physical operations.

Why This Matters to Your Business

It’s easy to think, "I’m a small business, why would a hacker care about me?"

The truth is, hackers love small businesses. Why? Because they often don't have the time or the staff to stay on top of these technical updates.

When a flaw like the SharePoint RCE is discovered, attackers use automated scripts to scan the entire internet. They aren't looking for you specifically: they are looking for any "open window."

If you use Microsoft 365, SharePoint, or Fortinet products to run your company, you are currently in the line of sight. A single successful breach can lead to ransomware, stolen client data, or a total shutdown of your operations.

And here’s where it gets scary: many of these attacks happen silently. You might not even know someone is in your system until it's too late.

A business professional calmly reviewing secure IT solutions on a tablet in a modern office lobby

Platinum Insight: Your Action Plan

At Platinum Web Services, we believe IT shouldn't be a burden you carry. You should be able to focus on scaling your business while we handle the "locks" on the doors.

Here is what you need to do right now to protect your organization:

Prioritize Your Patching: If you use FortiSandbox or SharePoint Server, update them immediately. These are the highest-risk items on the list.
Restrict Management Interfaces: Never leave your firewall or server management pages open to the public internet. Restrict them so they can only be accessed through a secure VPN.
Enable AMSI for SharePoint: The Antimalware Scan Interface (AMSI) is a powerful tool that helps catch "fileless" attacks before they can do damage. Make sure it's turned on.
Rotate Your Keys: If you suspect any system might have been compromised, it’s not enough to just patch it. You must rotate your "machine keys" to ensure hackers haven't left a permanent backdoor for themselves.
Audit Your Remote Access: Check your SonicWall and AD FS configurations. Ensure Multi-Factor Authentication (MFA) is active for every single user.

A professional specialist monitoring real-time network security and threat detection metrics on a large screen