Active Exploitation of Critical Fortinet Vulnerabilities

First seen 22 Jan 2026, 02:59 UTC • Darkreading

•48

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Recent attacks have targeted critical vulnerabilities in Fortinet products, allowing threat actors to exploit admin accounts. Once authenticated, attackers exported device configurations containing hashed credentials and other sensitive information, following the execution of a reverse-shell payload.

How this analysis works

Continue Reading

Exploitation of FortiGate SSO Vulnerabilities by Threat Actors Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation GRU Compromises Home Routers in 23 States to Steal Outlook Credentials FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Critical Check Point VPN Vulnerability Exploited by Ransomware Gang Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

Active Exploitation of Critical Fortinet Vulnerabilities

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading