Vulnerabilities
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Fortinet"
Vulnerabilities
The bugs could be exploited without authentication for command execution and authentication bypass.
Vulnerabilities
Tracked as CVE-2026-24858, the bug allows attackers to log into devices registered to other FortiCloud accounts.
Vulnerabilities
Similar to recent FortiCloud single sign-on (SSO) login vulnerabilities, the attacks bypass authentication.
Vulnerabilities
Hackers bypass the FortiCloud SSO login authentication to create new accounts and change device configurations.
Vulnerabilities
Exploitable without authentication, the two security defects could lead to configuration leak and code execution.
Vulnerabilities
Tracked as CVE-2020-12812, the exploited FortiOS flaw allows threat actors to bypass two-factor authentication.
Vulnerabilities
Threat actors are exploiting the two critical authentication bypass vulnerabilities against FortiGate appliances.
Vulnerabilities
The two security defects impact FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO login authentication enabled.
Vulnerabilities
An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.
Network Security
Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its...
Vulnerabilities
Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products.
Malware & Threats
GreyNoise has discovered that attacks exploiting Cisco, Fortinet, and Palo Alto Networks vulnerabilities are launched from the same infrastructure.
Vulnerabilities
High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering.
Vulnerabilities
Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates.
Vulnerabilities
Dozens of FortiWeb instances have been hacked after PoC targeting a recent critical vulnerability was shared publicly.
Vulnerabilities
Ivanti, Fortinet, and Splunk have released patches for critical- and high-severity vulnerabilities in their products.
Vulnerabilities
Patches released by Fortinet and Ivanti resolve over a dozen vulnerabilities, including high-severity flaws leading to code execution, credential leaks.
Vulnerabilities
Fortinet has patched a dozen vulnerabilities, including a critical flaw exploited in the wild against FortiVoice instances.
Data Breaches
The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices.
Malware & Threats
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
Malware & Threats
Data Breaches
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
Mobile & Wireless
