A vulnerability in DHCP can add routes to a client’s routing table via the classless static route option (121), causing VPN-based security solutions that rely on routes to redirect traffic to potentially leak traffic over the physical interface. This exposes network traffic, expected to be protected by the VPN, to attackers on the same local network who can read, disrupt, or modify it. Additionally, several versions of Fortinet products, including FortiPAM, FortiWeb, FortiAuthenticator, FortiSwitchManager, FortiOS, and FortiProxy, contain a stack-based buffer overflow vulnerability. This flaw allows attackers to execute unauthorized code or commands via specially crafted packets in the affected versions, posing a significant security risk.