Fortinet has fixed nine vulnerabilities, including high-severity command execution and authentication bypass flaws.
Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configuration data, according to cybersecurity company Arctic Wolf. The campaign ...
CISA added the flaw to its KEVs catalog as Fortinet warned that patches for most affected versions remain “upcoming,” even though vulnerable devices can no longer use cloud SSO until upgraded.
Fortinet systems are under threat due to another authentication-based flaw, with security experts warning edge devices are now a vulnerable attack surface for networks. A single sign-on (SSO) ...
Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively exploited.
A critical security flaw in FortiCloud SSO has left over 25,000 Fortinet devices vulnerable to hijack attempts. A critical security gap in FortiCloud's Single Sign-On (SSO) system has left more than ...