High-Severity Vulnerabilities Patched by Fortinet and Ivanti

SecurityWeek reports that Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, patching a range of vulnerabilities across their products.

Fortinet published 29 new advisories covering more than 30 flaws, several of which are rated high severity, including CVE-2025-54988 affecting FortiDLP via Apache Tika, CVE-2025-53951 and CVE-2025-54658 affecting FortiDLP privilege escalation, CVE-2025-58325 in FortiOS, CVE-2024-33507 impacting FortiIsolator, CVE-2025-57741 in LaunchDaemon for FortiClientMac, and CVE-2025-49201 impacting FortiPAM and FortiSwitchManager to bypass authentication.

Medium- and low-severity issues were addressed across FortiOS and a range of other Fortinet products. Ivanti meanwhile patched vulnerabilities in Endpoint Manager Mobile (EPMM) and Neurons for MDM, documenting three high-severity flaws in EPMM that can be exploited by an authenticated admin, plus a medium-severity issue; Neurons for MDM fixed two high-severity flaws, including an MFA bypass and an issue allowing an authenticated attacker to unenroll devices, alongside a medium-severity API flaw.

According to SecurityWeek, both Ivanti and Fortinet vulnerabilities are often targeted by threat actors, and users are urged to apply patches promptly.