Fortinet Patches Nearly 100 Vulnerabilities

Fortinet has published 89 security advisories addressing nearly 100 vulnerabilities across its products, including about 17 critical flaws, several of which could allow arbitrary code execution; FortiMail received the largest batch of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager and FortiAnalyzer. Fortinet says none of the flaws are known to be exploited in the wild; one FortiClient flaw, dubbed Fortinet2Shell by the researcher who found it, could let a malicious website execute code on a victim’s machine through a CORS misconfiguration when FortiPAM is enabled.