保安警報 (A26-11-26): Fortinet 產品多個漏洞

描述:

Fortinet 發布了安全公告，以應對 Fortinet 系統的多個漏洞。攻擊者可以向受影響的系統傳送特製的請求，從而發動攻擊。

受影響的系統:

• FortiAnalyzer
• FortiManager
• FortiAuthenticator
• FortiClient
• FortiOS
• FortiMail
• FortiRecorder
• FortiVoice
• FortiSASE-Sovereign

有關受影響產品的詳細資料，請參閱供應商網站的相應安全公告。

影響:

成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、權限提升、泄漏資訊、繞過保安限制、仿冒詐騙或篡改。

建議:

現已有適用於受影響系統的修補程式。受影響系統的系統管理員應遵從供應商的建議，立即採取行動以降低風險。

進一步資訊:

• https://fortiguard.fortinet.com/psirt/FG-IR-26-190
• https://fortiguard.fortinet.com/psirt/FG-IR-26-191
• https://fortiguard.fortinet.com/psirt/FG-IR-26-192
• https://fortiguard.fortinet.com/psirt/FG-IR-26-193
• https://fortiguard.fortinet.com/psirt/FG-IR-26-194
• https://fortiguard.fortinet.com/psirt/FG-IR-26-195
• https://fortiguard.fortinet.com/psirt/FG-IR-26-196
• https://fortiguard.fortinet.com/psirt/FG-IR-26-197
• https://fortiguard.fortinet.com/psirt/FG-IR-26-198
• https://fortiguard.fortinet.com/psirt/FG-IR-26-199
• https://fortiguard.fortinet.com/psirt/FG-IR-26-200
• https://fortiguard.fortinet.com/psirt/FG-IR-26-201
• https://fortiguard.fortinet.com/psirt/FG-IR-26-202
• https://fortiguard.fortinet.com/psirt/FG-IR-26-203
• https://fortiguard.fortinet.com/psirt/FG-IR-26-204
• https://fortiguard.fortinet.com/psirt/FG-IR-26-205
• https://fortiguard.fortinet.com/psirt/FG-IR-26-206
• https://fortiguard.fortinet.com/psirt/FG-IR-26-207
• https://fortiguard.fortinet.com/psirt/FG-IR-26-208
• https://fortiguard.fortinet.com/psirt/FG-IR-26-209
• https://fortiguard.fortinet.com/psirt/FG-IR-26-210
• https://fortiguard.fortinet.com/psirt/FG-IR-26-211
• https://fortiguard.fortinet.com/psirt/FG-IR-26-212
• https://fortiguard.fortinet.com/psirt/FG-IR-26-213
• https://fortiguard.fortinet.com/psirt/FG-IR-26-214
• https://fortiguard.fortinet.com/psirt/FG-IR-26-215
• https://fortiguard.fortinet.com/psirt/FG-IR-26-216
• https://fortiguard.fortinet.com/psirt/FG-IR-26-217
• https://fortiguard.fortinet.com/psirt/FG-IR-26-218
• https://fortiguard.fortinet.com/psirt/FG-IR-26-219
• https://fortiguard.fortinet.com/psirt/FG-IR-26-220
• https://fortiguard.fortinet.com/psirt/FG-IR-26-221
• https://fortiguard.fortinet.com/psirt/FG-IR-26-222
• https://fortiguard.fortinet.com/psirt/FG-IR-26-223
• https://fortiguard.fortinet.com/psirt/FG-IR-26-224
• https://fortiguard.fortinet.com/psirt/FG-IR-26-225
• https://fortiguard.fortinet.com/psirt/FG-IR-26-226
• https://fortiguard.fortinet.com/psirt/FG-IR-26-227
• https://fortiguard.fortinet.com/psirt/FG-IR-26-228
• https://fortiguard.fortinet.com/psirt/FG-IR-26-229
• https://fortiguard.fortinet.com/psirt/FG-IR-26-230
• https://fortiguard.fortinet.com/psirt/FG-IR-26-231
• https://fortiguard.fortinet.com/psirt/FG-IR-26-232
• https://fortiguard.fortinet.com/psirt/FG-IR-26-233
• https://fortiguard.fortinet.com/psirt/FG-IR-26-234
• https://fortiguard.fortinet.com/psirt/FG-IR-26-235
• https://fortiguard.fortinet.com/psirt/FG-IR-26-236
• https://fortiguard.fortinet.com/psirt/FG-IR-26-237
• https://fortiguard.fortinet.com/psirt/FG-IR-26-238
• https://fortiguard.fortinet.com/psirt/FG-IR-26-239
• https://fortiguard.fortinet.com/psirt/FG-IR-26-240
• https://fortiguard.fortinet.com/psirt/FG-IR-26-241
• https://fortiguard.fortinet.com/psirt/FG-IR-26-242
• https://fortiguard.fortinet.com/psirt/FG-IR-26-243
• https://fortiguard.fortinet.com/psirt/FG-IR-26-244
• https://fortiguard.fortinet.com/psirt/FG-IR-26-246
• https://fortiguard.fortinet.com/psirt/FG-IR-26-247
• https://fortiguard.fortinet.com/psirt/FG-IR-26-248
• https://fortiguard.fortinet.com/psirt/FG-IR-26-249
• https://fortiguard.fortinet.com/psirt/FG-IR-26-250
• https://fortiguard.fortinet.com/psirt/FG-IR-26-251
• https://fortiguard.fortinet.com/psirt/FG-IR-26-252
• https://fortiguard.fortinet.com/psirt/FG-IR-26-253
• https://fortiguard.fortinet.com/psirt/FG-IR-26-255
• https://fortiguard.fortinet.com/psirt/FG-IR-26-256
• https://fortiguard.fortinet.com/psirt/FG-IR-26-257
• https://fortiguard.fortinet.com/psirt/FG-IR-26-258
• https://fortiguard.fortinet.com/psirt/FG-IR-26-259
• https://fortiguard.fortinet.com/psirt/FG-IR-26-260
• https://fortiguard.fortinet.com/psirt/FG-IR-26-261
• https://fortiguard.fortinet.com/psirt/FG-IR-26-262
• https://fortiguard.fortinet.com/psirt/FG-IR-26-263
• https://fortiguard.fortinet.com/psirt/FG-IR-26-264
• https://fortiguard.fortinet.com/psirt/FG-IR-26-265
• https://fortiguard.fortinet.com/psirt/FG-IR-26-266
• https://fortiguard.fortinet.com/psirt/FG-IR-26-267
• https://fortiguard.fortinet.com/psirt/FG-IR-26-268
• https://fortiguard.fortinet.com/psirt/FG-IR-26-269
• https://fortiguard.fortinet.com/psirt/FG-IR-26-270
• https://fortiguard.fortinet.com/psirt/FG-IR-26-271
• https://fortiguard.fortinet.com/psirt/FG-IR-26-272
• https://fortiguard.fortinet.com/psirt/FG-IR-26-273
• https://fortiguard.fortinet.com/psirt/FG-IR-26-274
• https://fortiguard.fortinet.com/psirt/FG-IR-26-275
• https://fortiguard.fortinet.com/psirt/FG-IR-26-276
• https://fortiguard.fortinet.com/psirt/FG-IR-26-277
• https://www.hkcert.org/tc/security-bulletin/fortinet-products-multiple-vulnerabilities_20261111
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61625
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26248
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-121526 (to CVE-2026-121530)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126144 (to CVE-2026-126166)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126170 (to CVE-2026-126171)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126175 (to CVE-2026-126176)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126178 (to CVE-2026-126185)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126211 (to CVE-2026-126214)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126218 (to CVE-2026-126219)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126222 (to CVE-2026-126242)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-126244 (to CVE-2026-126263)