Fortinet patches expose multiple management and routing flaws
Fortinet has disclosed critical security flaws across FortiManager, FortiAnalyzer, and FortiOS. The issues include weaknesses that could let attackers execute code without logging in, and the disclosures say exposure depends on enabled features and network access. FortiManager and FortiAnalyzer exposure The highest-rated flaw is CVE-2026-126170, tracked as FG-IR-26-219. It has a CVSS score of 9.8 and involves JSON injection in the JSON-RPC API used by FortiManager and FortiAnalyzer. When the…