Back Risky.Biz

Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls

Risky.Biz • January 22, 2026

A poorly patched bug is being exploited in Fortinet firewalls, hackers go after security testing environments, Jordanian police used Cellebrite against activists, and new Cisco and SmarterMail zero-days.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Widespread Exploitation of Authentication Bypass in Fortinet Firewalls An authentication bypass vulnerability in Fortinet Fortiweb firewalls is being exploited in widespread and ongoing attacks. The bug has not yet been assigned a CVE identifier, and the attacks are targeting security testing environments. This situation follows reports of a poorly patched bug being exploited in similar Fortinet products. 2 sources 34

Extracted Entities

Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Platforms (1)

Tools (1)