Fortinet Patches Five Vulnerabilities Across FortiAP, FortiOS, and Enterprise Products

Fortinet published advisories on May 12, 2026 for five vulnerabilities affecting FortiSandbox, FortiAP, FortiAnalyzer/FortiManager, and FortiOS — the most severe is CVE-2026-26083, a Critical unauthenticated authorization bypass in FortiSandbox that could expose sandbox analysis data; remaining Medium-rated flaws include CLI command injection, API DoS, and an out-of-bounds write. Organizations are advised to prioritize patching the FortiSandbox issue immediately, restrict CLI/API access to trusted administrators, and monitor internal CAPWAP/API traffic while applying updates.