FORTINET: 🗓️ Calendar: October 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 📌 🔔 Persistent Denial of Service in Admin Profile (FortiSandbox) FortiSandbox has a reported Uncaught Exception (CWE-248) issue that could let a privileged attacker trigger a persistent DoS, resulting in loss of access to both the GUI and CLI through crafted HTTP requests. Persistent disruption of […]
FORTINET: 📅 October 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary ⛳🔎 ⚠️ Multiple Arbitrary File Read/Write via SQL Injection (CWE-89) FortiAnalyzer, FortiManager, FortiManager Cloud, and FortiAnalyzer Cloud are affected by an SQL Injection weakness (improper neutralization of special elements used in an SQL command). With a low-privileged user, an attacker may be able to execute arbitrary […]
FORTINET: 🗓️ Calendar • Oct 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary ## 🔥 FortiSandbox GUI: High-Severity Auth Bypass (CWE-288)Fortinet disclosed a CVSSv3 9.6 (Critical) issue affecting the FortiSandbox web management interface (GUI). The vulnerability, “Authentication Bypass Using an Alternate Path or Channel” (CWE-288), can enable a remote, unauthenticated attacker to bypass authentication by sending crafted HTTP requests. […]
FORTINET: 📅 October 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🛡️ 🔎 Title: HTML injection in WebUI (XSS risk in FortiManager / FortiAnalyzer) ⚠️ Alarms — What’s the issue? FortiManager and FortiAnalyzer WebUI are affected by an HTML/script neutralization flaw, where an attacker could trigger a cross-site scripting (XSS) condition by abusing the Identify Provider name […]
FORTINET: 📅 Published: October 13, 2026 (revised 2026-10-13)
FORTINET Security Advisory Published Date: Not specified Advisory Summary — 🛑 Title: GUI Denial of Service (FortiOS) CVSS v3: 6.7 Impact: Management GUI/HTTPS access disruption (operational risk, potential interruption of admin workflows) Delay incident response (can’t access GUI/API as expected) Increase time-to-mitigate for adjacent threats Create cascading risk if remediation depends on GUI access (config […]
FORTINET: 🗓️ Calendar • October 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔎 📌 🛠️ Fabric API Authentication bypass (FortiSandbox / FortiSandbox Cloud) ⚠️ 🚨 What happenedFortinet reports a vulnerability involving a hard-coded cryptographic key (CWE-321) in FortiSandbox and FortiSandbox Cloud API. Under certain conditions, an unauthenticated attacker may be able to access some API endpoints by sending […]
FORTINET: 📅 Published: Mon, 13 Oct 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary CVE/Advisory Affected Products/Components: FortiOS, FortiProxy, FortiSwitch (via newcli daemon) Issue Type: Double Free — CWE-415 Impact: A local authenticated attacker can trigger a crash of the newcli daemon using crafted CLI commands Severity (CVSSv3): 2.1 (Low) Revised: 2026-10-13 ⚠️ Why This Matters (Operational & Security Angle) […]
FORTINET: 🗓️ Calendar • Tue, 13 Oct 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔎 🧩 Broken Authorization in FortiSIEM GUI (CWE-862) Fortinet PSIRT reports a missing authorization vulnerability in the FortiSIEM GUI. An authenticated attacker may be able to execute unauthorized code or commands by sending specially crafted HTTP requests. Primary risk: privilege/authorization bypass leading to unauthorized command/code execution […]
FORTINET: 🗓️ Calendar: Oct 13, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary CVSSv3: 9.4 (Critical) Impact: An improperly validated path may enable unauthenticated attackers to send crafted packets leading to unauthorized code/command execution. Attack vector concept: Path traversal combined with arbitrary file write via the grpc phQueryMaster component. A tenant-to-platform stepping stone (if SIEM integrity is compromised) A […]
HPE: 📅 October 12, 2026
HPE Security Advisory Published Date: Not specified Advisory Summary 🏷️ 🔎 HPE Security Bulletin HPESBNS05148 rev.1 — HPE NonStop Servers, Multiple Vulnerabilities 🧩 What’s new / why it mattersHPE has published HPESBNS05148 rev.1 addressing multiple vulnerabilities in HPE NonStop servers. For data centers, these advisories are typically significant because they can affect core availability, integrity, […]