Fortinet Patches 11 Vulnerabilities Across FortiSandbox, FortiOS, FortiAnalyzer, and FortiManager

Fortinet published advisories on April 14, 2026, for 11 vulnerabilities across FortiSandbox, FortiAnalyzer, FortiManager, FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. The batch includes two Critical unauthenticated flaws — an OS command injection (CVE-2026-39808) and a JRPC API path traversal enabling authentication bypass (CVE-2026-39813) — a High-rated unauthenticated heap overflow in oftpd (CVE-2026-22828), plus multiple Medium/Low path traversal, XSS, and SQL injection issues; administrators are urged to apply patches immediately.