Fortinet has released updates to fix multiple vulnerabilities in its products. A malicious actor could exploit some of these vulnerabilities to trigger remote code execution, elevation of privilege, sensitive information disclosure and security restriction bypass on the targeted system.

Fortinet has fixed security vulnerabilities (CVE-2024-40593, CVE-2025-59810, CVE-2025-59808, CVE-2025-54838, CVE-2024-47570, CVE-2025-57823, CVE-2025-64153, CVE-2025-64156, CVE-2025-53679, CVE-2025-53949, CVE-2025-60024,  CVE-2025-59718, CVE-2025-59719, CVE-2025-59923, CVE-2025-54353, CVE-2025-62631, CVE-2025-64447, CVE-2025-64471) in FortiOS, FortiManager, FortiAnalyzer, FortiPortal, FortiSOAR, FortiWeb, FortiPAM, FortiSRA, FortiSwitchManager, FortiProxy, FortiSASE, FortiExtender, FortiVoice, FortiSandbox, FortiSandbox Cloud, FortiAuthenticator.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.