Fortinet
Fortinet security: appliance vulnerabilities, authentication issues and vendor updates. Check the individual product and version before applying guidance.
Latest report:
Matching reports 5
-
FortiBleed Turns Stolen Fortinet Credentials Into Persistent Network Access
U.S. authorities warn FortiBleed remains active against exposed FortiGate firewalls and SSL VPNs, using stolen credentials for persistent network access.
-
FortiMail Zero-Day Gives Unauthenticated Attackers a Route to System File Writes
FortiMail zero-day CVE-2026-104286 (CVSS 9.8) enables unauthenticated file writes. Affected versions, fixes, workarounds and IOCs.
-
Fortinet CVE-2025-25249 Exploited at Scale to Install PivotC2 RAT
Attackers exploit Fortinet CVE-2025-25249 RCE flaw at scale, scanning 30,000+ IPs to install PivotC2 RAT on 178 devices for tunneling and data theft.
-
Fortinet Fixes Critical Authentication Flaws in FortiMonitorOnSight and Chrome Extension
Fortinet patched 10 flaws, including critical JWT auth bypass in FortiMonitorOnSight and Chrome extension proxy bug. Update FortiPAM and extension now.
-
Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager
Fortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.