MS-ISAC Flags High-Risk Security Flaws in Fortinet Products

MS-ISAC Advisory 2026-003 warns of multiple vulnerabilities in Fortinet products (notably FortiOS, FortiSandbox, FortiWeb, FortiVoice and others) including heap-based buffer overflow and command injection flaws that could allow remote arbitrary code execution; affected versions span many releases. The advisory provides CVE references, risk assessments (high for medium/large organizations), and recommends applying Fortinet stable updates, enforcing least-privilege, and conducting vulnerability management; no active exploitation was reported at issuance.