CVE-2024-55591

Critical9.8Published on January 14, 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Actively exploited

In the CISA exploited-vulnerabilities catalogue since Jan 14, 2025
US federal agencies must remediate it by Jan 21, 2025 (BOD 22-01)
Attacked 1 day before the vulnerability was made public
Confirmed by sensors, not only by reports
Used in ransomware campaigns

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Source: CISA KEV · Sep 29, 2026 Sep 22, 2026 Sep 8, 2026 Aug 17, 2026 Aug 11, 2026 Aug 10, 2026

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-288

Vendorsfortinet

Affected products

Vendors	Product	Versions
fortinet	fortiproxy	< 7.0.20
fortinet	fortios	< 7.0.17

Ransomware

Gunra, the Conti-Derived Ransomware Group Now Exploiting Exposed Firewalls and VPNs

CISA advisory on Gunra ransomware group exploiting exposed firewalls and VPNs. Derived from Conti, it uses double extortion and targets multiple sectors.

Aug 16, 202607:085 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Actively exploited

Affected products

Related articles

Gunra, the Conti-Derived Ransomware Group Now Exploiting Exposed Firewalls and VPNs