Fortinet has released updates to fix multiple vulnerabilities in its products. A malicious actor could exploit some of these vulnerabilities to trigger cross-site scripting, elevation of privilege, denial of service condition, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

Fortinet has fixed security vulnerabilities (CVE-2023-46718, CVE-2025-49201, CVE-2025-54988, CVE-2024-33507, CVE-2024-26008, CVE-2024-47569, CVE-2024-50571, CVE-2025-22258, CVE-2025-25252, CVE-2025-25253, CVE-2025-49201 CVE-2025-25255, CVE-2025-31365, CVE-2025-31366, CVE-2025-31514, CVE-2025-46774, CVE-2025-47890, CVE-2025-54822, CVE-2025-53845, CVE-2025-57716, CVE-2025-57740, CVE-2025-54973,  CVE-2025-57741, CVE-2025-58325, CVE-2025-58903) in FortiOS, FortiProxy, FortiIsolator, FortiDLP, FortiPAM, FortiSwitchManager, FortiMail, FortiManager, FortiManager Cloud, FortiNDR, FortiRecorder, FortiTester, FortiSASE, FortiVoice, FortiWeb, FortiAnalyzer, FortiAnalyzer Cloud, FortiSRA, FortiClientMac and FortiClientWindows.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.