Fortinet Patches Multiple Vulnerabilities Across FortiClient and Other Products

Fortinet released security updates addressing 22 vulnerabilities across multiple products, including FortiWeb, FortiSwitchAX, FortiManager, and FortiClient (Linux). The issues span multiple bug classes (e.g., authentication bypass, heap-based buffer overflow, and cleartext storage of sensitive information) and could enable outcomes such as security bypass, data tampering, denial-of-service, privilege escalation, information disclosure, and in some cases unauthorized code/command execution. Belgium’s CCB urged organizations to patch promptly and noted Fortinet reported no evidence of active exploitation at the time of the advisory.

One of the patched flaws, CVE-2026-24018 (CVSS 7.8), was detailed by the Zero Day Initiative (ZDI-26-186) as a local privilege escalation vulnerability in FortiClient. ZDI reported the flaw stems from handling of certain shared objects: a local attacker with the ability to run low-privileged code can create a symbolic link to coerce a service into loading an arbitrary shared object, enabling execution of attacker-controlled code as root. Fortinet issued a fix and published vendor guidance under FG-IR-26-083.