Fortinet Security Updates – 13 May 2026

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, execute unauthorized code or commands, and gain access to the affected system via specially crafted requests.

Sample of the addressed vulnerabilities:

1. Fortinet FortiAuthenticator Improper Access Control Vulnerability in API Endpoints (CVE-2026-44277):

• CVSS: 9.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. FortiOS CAPWAP Daemon Out-of-Bounds Write Vulnerability (CVE-2025- 53844):

• CVSS: 8.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• FortiAuthenticator.
• FortiAnalyzer.
• FortiManager.
• FortiClientWindows.
• FortiOS.