Critical Fortinet FortiManager fgtupdates Vulnerability Allows Remote Command Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Issues Security Advisory for Critical Vulnerabilities On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote unauthenticated attackers to execute unauthorized commands. The vulnerabilities affect enterprise network management environments, posing significant risks to users of the affected Fortinet products. 71 sources 72