Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Fortinet, Ivanti, and SAP published security updates addressing multiple critical vulnerabilities (e.g., CVE-2026-25089, CVE-2026-10520, CVE-2026-10523, CVE-2026-44748, CVE-2026-27671) that can enable unauthenticated command injection, authentication bypass, XML signature manipulation, and memory corruption leading to remote code execution or information disclosure; affected product versions are enumerated and administrators are urged to upgrade to patched releases immediately. The report states there is no current evidence of exploitation in the wild but emphasizes timely patching for protection.