Fortinet, Ivanti, and Intel Patch High-Severity Vulnerabilities
Summary
Fortinet, Ivanti, and Intel released fixes for vulnerabilities that could enable code execution, privilege escalation, or security bypasses. The vendors reported no known in-the-wild exploitation.
Key points
- Fortinet patched 22 vulnerabilities across its products, including high-severity flaws in FortiWeb, FortiSwitchAXFixed, FortiManager, and FortiClientLinux.
- Some Fortinet flaws could allow remote, unauthenticated attackers to bypass authentication rate limits or execute unauthorized code or commands; a FortiClientLinux symlink-following flaw could enable local privilege escalation to root.
- Ivanti fixed a high-severity privilege-escalation flaw in Desktop and Server Management versions before 2026.1.1; Ivanti said it was unaware of exploitation.
- Intel disclosed nine UEFI vulnerabilities affecting some reference platforms, including five high-severity flaws that could enable local code execution, privilege escalation, or information disclosure.
- Intel released UEFI firmware updates for more than 45 affected processor models. The article reports no known in-the-wild exploitation of the flaws.
Article Details
- Event Type
- Security patches released by Fortinet, Ivanti, and Intel for high- and lower-severity vulnerabilities.
- Impact
- The vulnerabilities could enable authentication rate-limit bypass, unauthorized code or command execution, privilege escalation, information disclosure, and other security impacts. Fortinet and Ivanti said they were not aware of exploitation, and the article reports that none of the Intel vulnerabilities appeared to have been exploited in the wild.
Vendors
FortinetFortinet, Ivanti, and Intel on Tuesday rolled out security fixes for dozens of vulnerabilities, including high-severity bugs that could be exploited for arbitrary code execution, privilege escalation, or securityIntelFortinet, Ivanti, and Intel on Tuesday rolled out security fixes for dozens of vulnerabilities, including high-severity bugs that could be exploited for arbitrary code execution, privilege escalation, or securityIvantiFortinet, Ivanti, and Intel on Tuesday rolled out security fixes for dozens of vulnerabilities, including high-severity bugs that could be exploited for arbitrary code execution, privilege escalation, or security
Products
Desktop and Server Management (DSM)Ivanti rolled out fixes for a high-severity security defect in Desktop and Server Management (DSM) before version 2026.1.1 that could allow attackers to elevate their privileges, noting that it is not aware of the flawFortiClientLinuxFortinet announced patches for 22 security defects across its products, including high-severity flaws in FortiWeb, FortiSwitchAXFixed, FortiManager, and FortiClientLinux.FortiManagerFortinet announced patches for 22 security defects across its products, including high-severity flaws in FortiWeb, FortiSwitchAXFixed, FortiManager, and FortiClientLinux.FortiSwitchAXFixedFortinet announced patches for 22 security defects across its products, including high-severity flaws in FortiWeb, FortiSwitchAXFixed, FortiManager, and FortiClientLinux.FortiWebFortinet announced patches for 22 security defects across its products, including high-severity flaws in FortiWeb, FortiSwitchAXFixed, FortiManager, and FortiClientLinux.