Fortinet Security Updates – 11 March 2026

The addressed vulnerabilities could allow the attacker to bypass authentication mechanisms, perform denial-of-service attacks, execute unauthorized code or commands, gain elevated privileges, obtain sensitive information, bypass firewall and access control policies, or gain unauthorized administrative access to the affected products.

Sample of the addressed vulnerabilities:

1. FortiSwitchAX Buffer Overflow in LLDP OUI field Vulnerability (CVE-2026- 22627):

• CVSS: 8.8
• Attack Vector: Adjacent
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. FortiClientLinux Local Privilege Escalation Vulnerability (CVE-2026-24018):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

It should be highlighted that Cybersecurity researchers have discovered a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks through previously disclosed vulnerabilities that have already been patched, “CVE-2025-59718, CVE- 2025-59719, and CVE-2026-24858”.