Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox