Fortinet
Fortinet Adds Virtual Patch Guidance for Linux TCP VulnerabilityNew!!
Fortinet adds virtual-patch guidance for CVE-2026-98432. Verify FMWP database 26.113 and applicable protection while product investigations continue.
CISA Adds Exploited Fortinet Path Traversal to KEV
CISA added exploited Fortinet CVE-2025-61624 to KEV. Validate privileged CLI exposure, update by October 19, triage, and retain evidence.
Fortinet Warns of Exploited FortiMail Path Traversal
Fortinet lists fixed FortiMail releases for exploited CVE-2026-104286. Preserve evidence, update each branch, validate mail flow, and retain records.
CVE-2026-24858: FortiCloud SSO cross-account authentication bypass
An attacker with a FortiCloud account and registered device can cross account boundaries when a vulnerable target enables FortiCloud SSO. Verify product-specific fixes and administrator activity; Fortinet's cloud-side block is not an appliance patch.
CVE-2026-35616: FortiClient EMS unauthenticated access-control bypass to code execution
Unauthenticated crafted requests can execute code on affected FortiClient EMS servers. Check the server release and hotfix, not endpoint client versions, then follow the applicable Fortinet hotfix or supported upgrade path.
CVE-2026-21643: Fortinet FortiClient EMS SQL Injection Vulnerability
Unauthenticated HTTP requests can exploit SQL injection on FortiClient EMS to execute code or commands. Scope the management server, not endpoint agents; this notice does not verify the fixed release for the installed branch.
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
This FortiOS information-exposure flaw requires prior filesystem compromise through another vulnerability. Its symbolic-link persistence mechanism makes recovery distinct from updating; the reviewed notice does not establish a verified fixed-release mapping.
CVE-2026-39808: FortiSandbox unauthenticated command injection
Crafted HTTP requests can trigger unauthorized commands on affected FortiSandbox systems without authentication. Restrict the management path while arranging the supported update, and match the fix to the installed release branch.
CVE-2026-25089: FortiSandbox second-order command injection
CISA reports unauthenticated HTTP command injection in FortiSandbox appliances, Cloud and PaaS. Confirm who controls remediation for each deployment; this notice establishes neither a fixed appliance build nor a completed managed-service rollout.
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CISA lists a packet-triggered buffer overflow affecting FortiOS, FortiSwitchManager and FortiSASE as exploited. Inventory the products separately; this notice does not provide a verified fixed-release matrix, so remediation requires Fortinet's product-specific guidance.