Vulnerabilities have been discovered in a number of Fortinet products. A malicious user could exploit these vulnerabilities (CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408) to trigger denial of service condition, elevation of privilege, remote code execution and security restrictions bypass on the targeted system. These vulnerabilities affect FortiOS, FortiSIEM, FortiClientWindows, FortiPAM, FortiProxy, FortiSwitchManager, FortiManager, FortiManager Cloud, FortiWeb products.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.