Vulnerabilities have been discovered in a number of Fortinet products. A malicious user could exploit these vulnerabilities (CVE-2026-39813, CVE-2024-23104, CVE-2026-22154, CVE-2025-59809, CVE-2025-61848, CVE-2026-39815, CVE-2025-61886, CVE-2026-22573, CVE-2025-68649, CVE-2025-61624, CVE-2026-21741, CVE-2026-39808, CVE-2026-39812, CVE-2026-39809, CVE-2026-39814, CVE-2025-53847, CVE-2026-39811, CVE-2026-22828, CVE-2026-39810, CVE-2026-27316, CVE-2026-21742, CVE-2026-22155, CVE-2026-22576, CVE-2026-22574, CVE-2026-25691, CVE-2026-23708, CVE-2026-40688) to trigger remote code execution, elevation of privilege, sensitive information disclosure and denial of service on the targeted system. These vulnerabilities affect FortiNDR, FortiVoice, FortiSandbox, FortiSOAR PaaS, FortiSOAR on-premise, FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud, FortiDDoS-F, FortiSandbox PaaS, FortiOS, FortiPAM, FortiProxy, FortiSwitchManager, FortiNAC-F, FortiClientEMS, FortiWeb, FortiSandbox Cloud products.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.