Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

Two high-severity authentication vulnerabilities in Fortinet's FortiWeb and FortiManager products highlight how misconfigured settings and unpatched software can open critical network management infrastructure to unauthenticated attackers. The FortiWeb flaw is particularly alarming because it is triggered by a specific wildcard configuration option, meaning a well-intentioned but poorly understood setting directly enables the attack surface. The FortiManager vulnerability compounds risk by allowing device impersonation, which could let attackers manipulate managed FortiGate devices across an enterprise environment. These flaws matter because network security appliances are high-value targets — compromising them can give attackers control over the very tools designed to protect an organization.