Fortinet
Fortinet security: appliance vulnerabilities, authentication issues and vendor updates. Check the individual product and version before applying guidance.
Scope and limits
Articles are selected by explicit product mentions in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.
Coverage timeline
Fortinet CVE-2025-25249 Exploited at Scale to Install PivotC2 RAT
Attackers exploit Fortinet CVE-2025-25249 RCE flaw at scale, scanning 30,000+ IPs to install PivotC2 RAT on 178 devices for tunneling and data theft.
Fortinet Fixes Critical Authentication Flaws in FortiMonitorOnSight and Chrome Extension
Fortinet patched 10 flaws, including critical JWT auth bypass in FortiMonitorOnSight and Chrome extension proxy bug. Update FortiPAM and extension now.
Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager
Fortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.