Found 55 bookmarks
Custom sorting
CVE-2025-32756: Fortinet RCE Exploited in the Wild
CVE-2025-32756: Fortinet RCE Exploited in the Wild
On May 13, 2025, FortiGuard Labs published an advisory detailing CVE-2025-32756, which affects a variety of Fortinet products: FortiCamera FortiMail FortiNDR FortiRecorder FortiVoice In their advisory, FortiGuard Labs states that Fortinet has observed this issue being exploited in the wild. The next day, May 14, the vulnerability was added to the CISA KEV catalog. The vulnerability is described in the advisory as a stack-based buffer overflow in the administrative API that can lead to unauthenticated remote code execution. Given that it’s being exploited in the wild, we figured we’d take a closer look. If you’d rather run the test instead of reading this write-up, coverage is already available in NodeZero.
#horizon3#EN#CVE-2025-32756#Fortinet#RCE#vulnerability
·horizon3.ai·
CVE-2025-32756: Fortinet RCE Exploited in the Wild
Analysis of Threat Actor Activity
Analysis of Threat Actor Activity
Fortinet diligently balances our commitment to the security of our customers and our culture of responsible transparency and commits to sharing information with that goal in mind. While efforts by threat actors to exploit known vulnerabilities are not new, recent Fortinet investigations have discovered a post exploitation technique used by a threat actor. This blog offers analysis of that finding to help our customers make informed decisions.
#fortinet#EN#2025#CVE-2022-42475#exploit#vulnerabilities#CVE-2023-27997#CVE-2024-21762
·fortinet.com·
Analysis of Threat Actor Activity
New Ransomware Operator Exploits Fortinet Vulnerability Duo
New Ransomware Operator Exploits Fortinet Vulnerability Duo
Between late January and early March, Forescout Research – Vedere Labs identified a series of intrusions based on two Fortinet vulnerabilities. It began with the exploitation of Fortigate firewall appliances — culminating in the deployment of a newly discovered ransomware strain we have dubbed SuperBlack.
#forescout#EN#2025#Fortinet#vulnerabilities#SuperBlack#ransomware
·forescout.com·
New Ransomware Operator Exploits Fortinet Vulnerability Duo
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function [CWE-306] in the FortiManager fgfmd daemon that allows a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. The vulnerability carries a CVSS v3 score of 9.8.
#rapid7#EN#2024#Fortinet#FortiManager#CVE-2024-47575#Zero-Day
·rapid7.com·
Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks
Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA
Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA
A case where an advanced adversary was observed exploiting three vulnerabilities affecting the Ivanti Cloud Services Appliance (CSA). This incident is a prime example of how threat actors chain zero-day vulnerabilities to gain initial access to a victim’s network. Learn more.
#fortinet#EN#2024#Ivanti#Cloud#Services#Appliance#CSA#CVE-2024-8190
·fortinet.com·
Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA
Fortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024
Fortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024
It affected (before patching) all currently-maintained branches, and recently was highlighted by CISA as being exploited-in-the-wild. This must be the first time real-world attackers have reversed a patch, and reproduced a vulnerability, before some dastardly researchers released a detection artefact generator tool of their own. /s At watchTowr's core, we're all about identifying and validating ways into organisations - sometimes through vulnerabilities in network border appliances - without requiring such luxuries as credentials or asset lists.
#watchtowr#EN#2024#Fortinet#FortiGate#CVE-2024-23113#PoC#vulnerabilty#analysis
·labs.watchtowr.com·
Fortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024
Exploit released for Fortinet RCE bug used in attacks, patch now
Exploit released for Fortinet RCE bug used in attacks, patch now
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.
#bleepingcomputer#EN#2024#Actively-Exploited#Exploit#Fortinet#PoC#Proof-of-Concept#RCE#Remote-Code-Execution#SQL-Injection#CVE-2023-48788
·bleepingcomputer.com·
Exploit released for Fortinet RCE bug used in attacks, patch now