Fortinet Patches Critical Authentication Bypass Vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Addresses Critical Vulnerabilities in Multiple Products Fortinet has patched critical vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. These security defects, which allow for authentication bypass and could lead to configuration leaks and code execution, were found to be exploitable without authentication. Users with FortiCloud SSO login authentication enabled are particularly impacted. 6 sources 45