Improper limitation of a pathname to a restricted directory

Fortinet PSIRT advisories describe numerous vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiSOAR, FortiPAM, FortiWeb, FortiAnalyzer, FortiMonitorOnSight, and related products. Issues include an actively exploited unauthenticated path traversal allowing arbitrary file writes, authentication and access-control bypasses, command injection, JWT authentication bypass, certificate-validation flaws, memory corruption, denial of service, SSRF, XSS, WAF evasion, and information disclosure. The highest-risk items include CVSS 9.8 path traversal, CVSS