Fortinet on Tuesday released 89 new security advisories addressing nearly 100 vulnerabilities across its product portfolio. The large-scale disclosure comes three weeks after the company announced integration of frontier AI models into its product security testing, enabling more efficient discovery of security defects.
“This ongoing effort complements the conventional methods we employ to identify and address vulnerabilities. This approach gives customers time to prioritize upgrades before additional technical details become public, which matters even more as AI shortens the time between disclosure and exploitation,” Fortinet stated.
Approximately 17 of the newly resolved flaws are rated critical severity. Several of these issues could be exploited for arbitrary code execution. Other critical bugs may lead to authentication bypass, LSA broadcast attacks, account takeover, unauthorized access to other VDOMs, compromise of secure email accounts, IBE webmail session compromise, server-side request execution, delivery of malicious or malformed attributes, webmail password resets, and command execution with super-admin privileges.
FortiMail received the largest batch of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager, and FortiAnalyzer. New updates for FortiSASE and FortiClient also resolve critical issues.
FortiClient Flaw Details
According to Kevin Joensen, principal security consultant at Baldur Security, the FortiClient bug is exploitable when FortiPAM is enabled. It could allow an attacker to execute arbitrary code if the victim visits a malicious website. “The root cause is a CORS misconfiguration that allows attacker-controlled web pages to communicate with a local service and reliably execute arbitrary code,” Joensen said. The researcher named the flaw Fortinet2Shell.
Fortinet also patched nearly 80 high-severity vulnerabilities. These flaws could lead to XSS attacks, code execution, code injection, arbitrary file uploads, command execution, denial-of-service conditions, man-in-the-middle attacks, privilege escalation, information disclosure, account takeover, unauthorized access, and other unauthorized actions.
Fortinet made no mention of any of the security defects being exploited in the wild. Additional information is available on the company’s PSIRT page.
