FortiOS and FortiSwitchManager Vulnerability Let Remote Attackers Execute Arbitrary Code

**Executive summary:** Fortinet disclosed a critical heap-based buffer overflow in the cw_acd daemon affecting multiple FortiOS branches, FortiSASE releases, and FortiSwitchManager versions that can allow unauthenticated remote code execution; administrators are urged to apply vendor patches (listed upgrade paths) immediately or implement mitigations such as disabling fabric access on interfaces and blocking CAPWAP control UDP ports (5246–5249).