Improper limitation of a pathname to a restricted directory

Fortinet PSIRT feed containing multiple vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiSandbox, FortiManager, FortiSIEM, FortiSOAR, FortiPAM, FortiWeb, FortiAnalyzer, FortiMonitorOnSight, and related products. The most urgent item is FG-IR-26-175, a CVSS 9.8 path traversal and null-byte flaw enabling unauthenticated arbitrary file writes and reported exploitation in the wild. Other notable issues include authentication bypasses, exposed sensitive information, arbitrary code execution, SSRF, certificate-validation weaknesses, WAF evasion, and denial-of-service vulnerabilities. CV