Multiple critical vulnerabilities have been patched in products from Fortinet and Ivanti, including two OS command injection flaws that can be exploited remotely without authentication, allowing for arbitrary code execution. These vulnerabilities pose a significant risk as they can be leveraged by attackers to gain unauthorized access and execute malicious code. The patches address these flaws, mitigating the risk of remote exploitation. Specifically, the vulnerabilities can be exploited to execute arbitrary code, highlighting the importance of prompt patching to prevent potential attacks. The fact that these flaws can be exploited without authentication increases the urgency for users to apply the patches1. This development is particularly noteworthy for organizations that rely on Fortinet products, as it underscores the need for ongoing vulnerability management and regular security updates. So what matters to security practitioners is that these patches must be applied promptly to prevent exploitation and protect their environments from potential attacks.