Back www.fortiguard.com

FG IR 26 123

www.fortiguard.com • May 15, 2026

An Out-Of-Bounds Write vulnerability [CWE-787] in FortiOS capwap daemon may allow an attacker controlling an authenticated FortiAP FortiExtender or FortiSwitch to gain execution privileges on the FortiGate device

Workarounds : Disable capwap daemon : ```config global config system global set wireless-controller disable end

show full | grep wireless-controller set wireless-controller disable set wireless-controller-port 5246

show full | grep fortiextender set fortiextender disable set fortiextender-data-port 25246 set fortiextender-discovery-lockdown disable set fortiextender-provision-on-authorization disable set fortiextender-vlan-mode disable ```

2026-05-12: Initial publication

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerabilities Discovered in Fortinet Products Fortinet has identified multiple critical vulnerabilities in its FortiSandbox and FortiAuthenticator products, which could allow unauthenticated attackers to execute arbitrary code remotely. The vulnerabilities are tracked as CVE-2026-44277 and CVE-2026-26083, both published on May 12, 2026. FortiAuthenticator's flaw stems from improper access control, while FortiSandbox suffers from a missing authorization issue. These vulnerabilities affect various versions of FortiAuthenticator and FortiSandbox, with a CVSS score of 9.1 indicating their critical nature. Although no active exploitation has been reported, Fortinet's products have been frequently targeted in the past, raising concerns about potential future attacks. Administrators are urged to apply patches immediately to mitigate risks. Fortinet's advisory emphasizes the importance of maintaining updated systems to prevent exploitation. 60 sources 73

FG IR 26 123

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (5)