Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox

Fortinet has addressed two critical remote code execution vulnerabilities in its FortiAuthenticator and FortiSandbox products, which could be exploited by threat actors to gain unauthorized access. The company's products are often targeted due to their high-trust security functions, making prompt patch deployment crucial. Historically, Fortinet flaws have been exploited in the wild, highlighting the importance of swift action. The vulnerabilities, which include zero-day and n-day flaws, can be leveraged by attackers to execute malicious code remotely. Given the attractiveness of these vulnerabilities to threat actors, companies should assess their exposure immediately¹. This is particularly important as zero-day activity targeting Fortinet products means the window for patching is already closing. So, practitioners should prioritize patching these vulnerabilities to prevent potential exploitation and minimize risk to their organizations.