Fortinet Releases Nearly 100 Security Advisories Addressing Critical and High-Severity Vulnerabilities
Fortinet has issued 89 new security advisories fixing almost 100 vulnerabilities across its product line. The update includes 17 critical flaws that could lead to arbitrary code execution, authentication bypass, server-side request execution, and other severe issues. Notably, FortiMail, FortiAuthenticator, FortiOS, and FortiManager received the most critical fixes. The company emphasizes its recent integration of AI models to enhance vulnerability discovery, aiming to preemptively mitigate potential exploitation. Fortinet states no evidence of these flaws being exploited in active campaigns, but highlights the importance of timely patching as AI reduces the window for attackers.
Entenda a falha
A vulnerabilidade
Fortinet published 89 advisories fixing nearly 100 flaws, with no CVEs listed for the story. About 17 are critical, several allowing arbitrary code execution. Others allow authentication bypass, account takeover, access to other VDOMs, IBE webmail session compromise, server-side request execution, webmail password resets and command execution as super admin. FortiMail got the most critical fixes, then FortiAuthenticator, FortiOS, FortiManager and FortiAnalyzer; FortiSASE and FortiClient also have critical fixes. The one detailed case is FortiClient (Fortinet2Shell): when FortiPAM is enabled, a victim visiting a malicious website could let an attacker run arbitrary code. Nearly 80 more high-severity flaws were patched. The articles give no affected or fixed version numbers.
Como funciona
Only the FortiClient case is described. With FortiPAM enabled, FortiClient runs a local service that web pages can reach from the browser. When the victim opens an attacker-controlled page, that page communicates with the local service, which accepts the requests and ends up executing arbitrary code on the victim's machine. The articles do not explain the mechanics of the other flaws.
Por que é vulnerável
For the FortiClient bug, researcher Kevin Joensen of Baldur Security says the root cause is a CORS misconfiguration that lets attacker-controlled web pages talk to a local service and reliably execute code. The articles do not state the root causes of the other flaws or what each fix changes.
Como foi descoberta
Fortinet says it recently integrated frontier AI models into its product security testing to find defects more efficiently, a move announced about three weeks before this release, and that this complements conventional methods. It says the approach gives customers time to upgrade before technical details become public. The FortiClient flaw was named Fortinet2Shell by Kevin Joensen of Baldur Security. Fortinet does not mention exploitation in the wild, and the advisories are on its PSIRT page.
Explicação gerada por IA a partir da matéria e dos artigos, em 11/11/2026 10:15.
Linha do tempo
-
Fortinet Releases Nearly 100 Security Advisories Addressing Critical and High-Severity Vulnerabilities
ler a análise desta fonte ocultar
Fortinet has issued 89 new security advisories fixing almost 100 vulnerabilities across its product line. The update includes 17 critical flaws that could lead to arbitrary code execution, authentication bypass, server-side request execution, and other severe issues. Notably, FortiMail, FortiAuthenticator, FortiOS, and FortiManager received the most critical fixes. The company emphasizes its recent integration of AI models to enhance vulnerability discovery, aiming to preemptively mitigate potential exploitation. Fortinet states no evidence of these flaws being exploited in active campaigns, but highlights the importance of timely patching as AI reduces the window for attackers.