Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

Multiple enterprise software vendors have released security patches for critical vulnerabilities including remote code execution, SQL injection, and privilege escalation flaws discovered in their products.

• •Ivanti Xtraction (CVE-2026-8043, CVSS 9.6) allows authenticated remote attackers to read sensitive files and execute client-side attacks through improper file name control
• •Fortinet FortiAuthenticator and FortiSandbox have critical access control and authorization bypass vulnerabilities (CVE-2026-44277, CVE-2026-26083, CVSS 9.1) enabling unauthenticated code execution
• •SAP released patches for SQL injection in S/4HANA (CVE-2026-34260) and authentication bypass in Commerce cloud (CVE-2026-34263, CVSS 9.6) allowing arbitrary code execution
• •VMware Fusion contains a TOCTOU vulnerability (CVE-2026-41702, CVSS 7.8) allowing local privilege escalation through setuid binary exploitation