Critical patches: Ivanti, Fortinet, SAP, VMware and n8n fix RCE, SQLi and LPE

Colleagues — critical security patches have been released for Ivanti, Fortinet, SAP, VMware and n8n.

- Ivanti Xtraction (CVE-2026-8043): arbitrary file read and HTML write leading to data leaks and client-facing attacks.
- Fortinet: fixes in FortiAuthenticator and FortiSandbox for unauthorised code execution.
- SAP: SQL injection in S/4HANA and authentication bypass in Commerce Cloud enabling malicious configuration upload.
- VMware Fusion: local privilege escalation.
- n8n: multiple prototype pollution issues and RCE fixed in recent releases.

Why this matters: these patches close attack vectors — update systems urgently.

Have you checked critical components in your infrastructure?

#cybersecurity #patches #RCE #infosec