Improper limitation of a pathname to a restricted directory

Fortinet’s advisory feed reports multiple vulnerabilities across FortiOS, FortiProxy, FortiManager, FortiSandbox, FortiSIEM, FortiClient, FortiWeb, FortiPAM, FortiMonitorOnSight and related products. The most urgent issue is FG-IR-26-175, a CVSS 9.8 path traversal and null-byte flaw allowing unauthenticated arbitrary file writes and reportedly exploited in the wild. Other high-impact issues include authentication bypasses, forged JWT authentication, unauthenticated access to sensitive information, arbitrary code execution, and certificate-validation weaknesses. The feed also references OpenSSL