Fortinet Product Flaws Expose Sensitive Information in FortiSandbox and FortiAuthenticator

Italian and Colombian cyber authorities issued alerts on vulnerabilities affecting Fortinet products, with CSIRT Italia detailing multiple information-disclosure flaws in FortiSandbox and FortiAuthenticator and warning that two of the issues are rated high severity. The disclosed weaknesses could allow a malicious user to access sensitive information on affected systems, expanding risk for organizations that rely on these appliances for authentication and sandboxing functions.

CSIRT Italia said the affected products span specific version ranges and urged administrators to apply the updates referenced in Fortinet security bulletins. Separate COLCERT alerts also warned of critical vulnerabilities in Fortinet products, reinforcing the need for immediate review of exposed deployments even though the Colombian notices provided limited technical detail on affected versions, CVE identifiers, or exploitation activity.