Month: September 2026

HPE: 📅 September 9, 2026

HPE Security Advisory Published Date: Not specified Advisory Summary 🔔 🛡️ HPE Networking Advanced Notification (Sept 15, 2026) — What Market Pros Should Do Now HPE has issued HPESBNW05126 rev.1 as an advance notice that additional Security Advisories for HPE Networking will be published on September 15, 2026. This is a forward-looking bulletin intended to […]

FORTINET: 🗓️ Calendar • 08 Sep 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🛡️🔎 ⚠️ ZTNA Portal Improper Certificate Validation (CWE-295) Fortinet has highlighted a CWE-295 improper certificate validation vulnerability affecting FortiOS and the FortiProxy Agentless ZTNA portal. The issue is rated CVSSv3: 7.3, and—critically—may enable a remote, unauthenticated attacker to execute a Man-in-the-Middle (MITM) attack on the communication […]

FORTINET: 🗓️ Calendar: 08 September 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🚨 ⚠️ Workflow session email approval process bypass — FortiManager (CWE-284) Fortinet reports an improper access control vulnerability (CWE-284) in FortiManager that could let an administrator bypass the approval process for workflow sessions by using crafted HTTP/HTTPS requests. The reported CVSSv3 score is 4.7, indicating moderate […]

FORTINET: 🗓️ Calendar SymboI • 8 Sep 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🛑 ⚠️ Uncontrolled Resource Consumption in SNMP (FortiAnalyzer SNMP daemon) Fortinet has reported a CWE-457 (Use of Uninitialized Variable) issue in the FortiAnalyzer SNMP daemon. A remote, authenticated attacker (with user permission) may trigger a denial of service by abusing SNMP GETBULK requests, leading to uncontrolled […]

FORTINET: 🗓️ 08 Sep 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ⚠️ Unauthenticated Control of NAT Rules — Sensitive Data Exposure (CVSS 8.9) FortiSandbox / FortiSandbox Cloud / FortiSandbox PaaS WEB UI are affected by an improper access control issue (CWE-284). A vulnerability allows an unauthenticated attacker to use crafted HTTP requests to access sensitive information, […]

FORTINET: 🗓️ Calendar • Tue, 08 Sep 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 🛑 Open Redirect Weakness in FortiSIEM (CWE-601) FortiSIEM is reported to have an open redirect vulnerability (CVSSv3 2.8) where an authenticated attacker can craft HTTP requests to redirect users to any untrusted website. Phishing enablement: Redirects can be used to land analysts/operators on lookalike login […]

FORTINET: 🗓️ Calendar 09 Sep 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary Impact: Denial of service (service disruption) for the affected HTTPS service, potentially affecting admin access, web-based portals, and log/report availability depending on deployment. Severity Signal: CVSSv3 2.5 (low), but exploitation requires authentication—making it especially relevant for environments where attacker access is realistic (e.g., compromised accounts, insider […]

FORTINET: 📅 Publication date: Sep 8, 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary ⬛ ⚠️ Title: JWT authentication bypass risk in FortiMonitorOnSight (FortiMonitorOnSight web GUI) 📌 Summary (what’s happening): FortiMonitorOnSight contains a vulnerability related to Sensitive Information in Source Code (CWE-540) where a JWT used for authentication in the web GUI is signed with a static key. This can […]

FORTINET: 📅 Published: September 8, 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔶 Improper Authentication of FortiPAM Server — What’s New? Fortinet has disclosed a CWE-287 (Improper Authentication) issue tied to the Fortinet Privileged Access Agent (PAM) Chrome Extension. With a CVSSv3 score of 9.1, the vulnerability could let an unauthenticated remote attacker proxy a user’s browser traffic […]

FORTINET: 🗓️ Calendar—September 8, 2026

FORTINET Security Advisory Published Date: Not specified Advisory Summary 🚨 ALERT Cron Job Injection in Remote Backup (FortiSandbox) CVSS v3: 6.7 (moderate—potentially high impact due to privileged execution) tampering with backup schedules or execution outcomes persistence via job manipulation escalation of impact depending on integration with broader SOC/automation tooling FortiSandbox (PSIRT advisory indicates a specific […]