https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-33507.htmlhttps://patchthecve.com/cve/CVE-2024-33507.htmlWed, 17 Jun 2026 07:31:53 +0000HIGH 7.4: An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate loghttps://patchthecve.com/cve/CVE-2024-32124.htmlhttps://patchthecve.com/cve/CVE-2024-32124.htmlWed, 17 Jun 2026 07:29:19 +0000MEDIUM 4.3: An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.https://patchthecve.com/cve/CVE-2024-27779.htmlhttps://patchthecve.com/cve/CVE-2024-27779.htmlWed, 17 Jun 2026 07:20:16 +0000MEDIUM 6.7: An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versiohttps://patchthecve.com/cve/CVE-2024-54025.htmlhttps://patchthecve.com/cve/CVE-2024-54025.htmlWed, 17 Jun 2026 08:09:41 +0000MEDIUM 6.7: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before version 2.4.6 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.https://patchthecve.com/cve/CVE-2024-54024.htmlhttps://patchthecve.com/cve/CVE-2024-54024.htmlWed, 17 Jun 2026 08:09:41 +0000HIGH 7.2: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version 2.4.6 allows a privileged attacker with super-admin profile and CLI access to execute unauthorized code via specifically crafted HTTP requestshttps://patchthecve.com/cve/CVE-2024-55590.htmlhttps://patchthecve.com/cve/CVE-2024-55590.htmlWed, 17 Jun 2026 08:11:17 +0000HIGH 8.8: Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via