Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

**Executive summary:** Multiple critical and moderate vulnerabilities were disclosed in Fortinet products (FortiADC, FortiOS, FortiWeb, FortiClient, FortiExtender, FortiSandbox, FortiVoice, FortiMail, FortiPAM, FortiProxy, FortiSwitchManager, FortiADC logs, etc.), including remote code execution, stack/heap buffer overflows, command and SQL injection, and privilege/credential issues. At least one vulnerability (CVE-2025-58034 in FortiWeb) is reported as observed in the wild; organizations using affected Fortinet devices or services should prioritize patching and mitigation.