Vulnerabilities have been discovered in a number of Fortinet products. A malicious user could exploit these vulnerabilities (CVE-2025-31514, CVE-2026-25089, CVE-2025-67862, CVE-2026-49938, CVE-2025-25250) to trigger security restriction bypass, remote code execution and sensitive information disclosure on the targeted system. These vulnerabilities affect FortiOS, FortiProxy, FortiSandbox, FortiSandbox Cloud, FortiSandbox PaaS, FortiPortal, FortiSASE products.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.