Critical Security Patches Released by Ivanti, Fortinet, and SAP to Address Multiple Vulnerabilities

Ivanti, Fortinet, and SAP have issued urgent security updates to rectify critical vulnerabilities that pose significant risks of code execution and data breaches.

Key Points:

• Fortinet's patch addresses a command injection vulnerability in FortiSandbox with a CVSS score of 9.1.
• Ivanti released fixes for two critical vulnerabilities in Ivanti Sentry, including a command injection risk (CVSS 10.0) and an authentication bypass (CVSS 9.9).
• SAP has deployed updates for four critical vulnerabilities affecting multiple platforms, including NetWeaver, with CVSS scores ranging from 9.0 to 9.9.

Fortinet has tackled a severe command injection vulnerability in its FortiSandbox products, potentially allowing unauthenticated attackers to execute unauthorized commands. The vulnerability, tracked as CVE-2026-25089, affects specific versions of FortiSandbox, requiring users to upgrade for security. The exploit involves specially crafted HTTP requests that can manipulate the operating system commands, making it vital for users to act promptly on the updates provided by Fortinet.

Meanwhile, Ivanti has released patches for vulnerabilities in Ivanti Sentry that could allow remote unauthenticated users to gain root access and create admin accounts. The first vulnerability has a concerning CVSS score of 10.0, indicating a critical flaw that can be exploited with minimal effort. The fixes not only mitigate the current risks but also enhance the security by limiting access to sensitive endpoints, providing an extra layer of protection. SAP's security updates address multiple vulnerabilities in its products, which may allow unauthorized access to user data or lead to system disruptions. Although there are no reports of active exploitation, the nature of these vulnerabilities makes it imperative for organizations to keep their systems updated.

How do companies prioritize patches for critical vulnerabilities, and what steps should users take to ensure their systems are secure?

Learn More: The Hacker News

Want to stay updated on the latest cyber threats?

👉 [Subscribe to r/PwnHub](https://www.reddit.com/r/pwnhub)