Vendors fix critical flaws across Fortinet, Ivanti, and SAP to prevent authentication bypass and remote code execution.

Vulnerabilities could allow an attacker to bypass single sign-on login protection; users should disable SSO until patching is ...

Fortinet has released security updates to address two critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO ...

The disclosure includes one ‘critical’ vulnerability and several ‘high’ severity flaws. Fortinet disclosed new vulnerabilities Tuesday affecting FortiOS, FortiProxy, FortiClient Linux and ...

Fortinet has patched a critical SQL injection vulnerability in its endpoint management software which could enable remote code execution (RCE) on targeted servers. CVE-2023-48788 affects ...

The advisory from the cybersecurity company follows a report from security researchers who observed exploits in the wild in early December as part of a widespread campaign. Fortinet has confirmed the ...