Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

Fortinet, Ivanti, and ServiceNow have issued patches for a total of 15 vulnerabilities affecting their products. Among them is a critical remote code execution flaw in ServiceNow's AI platform (CVE-2026-6875), which could be exploited without authentication. Ivanti addressed two issues in its Xtraction tool (CVE-2026-14902 and CVE-2026-14903), involving open redirect and path traversal risks. Fortinet published 11 advisories covering multiple products like FortiOS and FortiSandbox, fixing high-severity bugs that could lead to information disclosure and unauthorized access. None of the companies reported active exploitation of these flaws.