Improper limitation of a pathname to a restricted directory

Fortinet PSIRT feed containing numerous vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiSOAR, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, and related components. The most urgent item is a CVSS 9.8 path traversal and null-byte flaw allowing unauthenticated arbitrary file writes, reportedly exploited in the wild. Other critical issues include authentication bypass, forged JWT authentication, improper authentication, sensitive information exposure, and remote code execution or denial-of-service vulnerabilities. The feed also covers