CISA Warns of Fortinet FortiWeb WAF Vulnerability Exploited in the Wild to Gain Admin Access

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Reports Exploitation of FortiWeb WAF Vulnerability for Admin Access CISA has reported active attacks exploiting a vulnerability in Fortinet's FortiWeb Web Application Firewall (WAF) that allows unauthorized admin access. Organizations using FortiWeb are at risk, and immediate action is advised to mitigate potential breaches. The vulnerability has been actively targeted in the wild. 2 sources 30