Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

Multiple critical and lower-severity vulnerabilities affecting Fortinet products were disclosed, including a stack-based overflow allowing remote arbitrary code execution and a TACACS+ authentication bypass that could grant admin access; the report lists numerous CVEs and affected components and warns that successful exploitation could allow installation of programs and compromise of data, but it does not indicate active exploitation.