%20(1).webp?w=1600&fit=1600,900&ssl=1 "Fortinet Patches 11 Vulnerabilities Across FortiSandbox, FortiOS, FortiAnalyzer and FortiManager")
Fortinet has released a new round of security updates addressing 11 vulnerabilities across its enterprise security portfolio.
The affected products include FortiSandbox, FortiOS, FortiAnalyzer, and FortiManager, all integral components of many organizations’ network defense infrastructure.
According to advisories coordinated by the Fortinet Product Security Incident Response Team (PSIRT), the update reinforces the company’s proactive approach to mitigating risks and protecting customers against potential data breaches and unauthorized access.
Two of the patched vulnerabilities have been classified as critical, requiring immediate attention from network administrators.
Critical Vulnerabilities Threatening Enterprise Networks
The most severe flaw, CVE-2026-39808, affects FortiSandbox and FortiSandbox PaaS API endpoints.
The vulnerability arises from improper input handling, allowing unauthenticated attackers to execute arbitrary OS commands.
Successful exploitation could grant complete system control, making it a top priority to patch.
Another critical issue, CVE-2026-39813, involves an authentication bypass and privilege escalation vulnerability in the FortiSandbox JRPC API.
Attackers could bypass login mechanisms and gain administrative privileges, potentially resulting in full internal compromise.
Beyond the critical flaws, nine other vulnerabilities range from high to low severity, spanning memory corruption, authentication failures, and code injection issues.
Examples include CVE-2026-22828, a heap-based buffer overflow in FortiAnalyzer Cloud and FortiManager Cloud, and CVE-2025-53847, which exposes critical functions to unauthenticated actors in FortiOS and FortiSwitchManager.
Others involve XSS, SQL injection, and path traversal flaws, emphasizing the importance of prompt patching.
Complete List of Addressed Vulnerabilities
| CVE ID | Vulnerability Description | Affected Products | Severity | Attack Type |
|---|---|---|---|---|
| CVE-2026-39808 | OS Command Injection through API endpoint | FortiSandbox, FortiSandbox PaaS | Critical | Unauthenticated |
| CVE-2026-39813 | Authentication bypass and Privilege escalation | FortiSandbox | Critical | Unauthenticated |
| CVE-2026-22828 | Heap-based buffer overflow in oftpd daemon | FortiAnalyzer Cloud, FortiManager Cloud | High | Unauthenticated |
| CVE-2026-25691 | Arbitrary directory delete on vmimages feature | FortiSandbox, FortiSandbox Cloud, FortiSandbox PaaS | Medium | Authenticated |
| CVE-2025-53847 | Missing authentication for critical function | FortiOS, FortiSwitchManager | Medium | Unauthenticated |
| CVE-2026-39812 | Multiple Stored XSS | FortiSandbox, FortiSandbox PaaS | Medium | Authenticated |
| CVE-2025-68649 | Path Traversal in CLI | FortiAnalyzer, FortiManager | Medium | Authenticated |
| CVE-2025-61624 | Path Traversal in CLI | FortiOS, FortiPAM, FortiProxy, FortiSwitchManager | Medium | Authenticated |
| CVE-2025-61886 | Reflected XSS in Operation Center | FortiSandbox, FortiSandbox PaaS | Medium | Unauthenticated |
| CVE-2025-61848 | SQL Injection via JSON RPC API | FortiAnalyzer, FortiManager | Medium | Authenticated |
| CVE-2026-27316 | Credential disclosure in LDAP configuration | FortiSandbox, FortiSandbox PaaS | Low | Authenticated |
Administrators should apply all available updates immediately and use Fortinet’s Upgrade Path Tool to ensure stability.
Additional precautions include monitoring logs for attack attempts, restricting external access to admin interfaces, and implementing strong access controls.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google
%20(1).webp?fit=1600,900&ssl=1&description=The affected products include FortiSandbox, FortiOS, FortiAnalyzer, and FortiManager, all integral components of many organizations’ network defense infrastructure.){kind=link}