Fortinet on Tuesday dropped 89 new security advisories that address nearly 100 vulnerabilities across its products.
The massive release comes three weeks after the company announced it has integrated frontier AI models into its product security testing and can discover security defects more efficiently.
“This ongoing effort complements the conventional methods we employ to identify and address vulnerabilities. This approach gives customers time to prioritize upgrades before additional technical details become public, which matters even more as AI shortens the time between disclosure and exploitation,” Fortinet says.
Approximately 17 of the newly resolved flaws are critical-severity issues, several of which could be exploited for arbitrary code execution.
Other critical bugs could lead to authentication bypass, LSA broadcast, account takeover, access to other VDOMs and to secure email accounts, IBE webmail session compromise, server-side request execution, malicious/malformed attribute delivery, webmail password resets, and command execution as super admin.
FortiMail received the largest batch of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager, and FortiAnalyzer. New FortiSASE and FortiClient updates also resolve critical issues.
According to Baldur Security principal security consultant Kevin Joensen, the FortiClient bug is exploitable if FortiPAM is enabled and could allow an attacker to execute arbitrary code if the victim visits a malicious website.
“The root cause is a CORS misconfiguration that allows attacker-controlled web pages to communicate with a local service and reliably execute arbitrary code,” Joensen says. The researcher named the flaw Fortinet2Shell.
Fortinet also patched nearly 80 high-severity vulnerabilities that could lead to XSS attacks, code execution, code injection, arbitrary file uploads, command execution, denial-of-service (DoS) conditions, MitM attacks, privilege escalation, information disclosure, account takeover, unauthorized access, and other unauthorized actions.
Fortinet makes no mention of any of these security defects being exploited in the wild. Additional information can be found on the company’s PSIRT page.
Related: ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
Related: Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Related: Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
Related: Recently Patched Barracuda Vulnerabilities Exploited in Attacks
