Fortinet Security Updates – 15 October 2025

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, conduct cross-site scripting or denial of service attacks, read arbitrary files via uploading a malicious solution pack, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. FortiIsolator Improper Session Handling During Authentication Vulnerability (CVE-2024-33507):

• CVSS: 7
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

2. FortiClientMac Local Privilege Escalation in LaunchDaemon Vulnerability (CVE-2025-57741):

• CVSS: 7
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• FortiManager 7.4.1 through 7.6.1.
• FortiMail 7.2.5 through 7.4.2.
• FortiVoice 6.0 all versions.
• FortiVoice 7.0.0 through 7.0.4.
• FortiOS 7.6.0 through 7.6.3, 7.4.0 through 7.4.9, 7.2.6 through 7.2.11.
• FortiSIEM 7.1.7 through 7.2.2.