CVE-2022-40684

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 14, 2025

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation79.5

A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...

Krybit and Qilin Target Organizations with FortiBleed Exploits74.6

Cybercriminal groups Krybit and Qilin have recently published details of their attacks on organizations using FortiOS SSL-VPN, exploiting the FortiBleed vulnerability (CVE-2022-40684). Krybit's latest victim is www.zhservices.com, while Qilin has targeted Revi Group. Both incidents involve the expos...

Ransomhouse Targets Pertamina in Latest Ransomware Attack69.0

Ransomhouse has claimed a new victim, Pertamina, following the exposure of FortiOS SSL-VPN credentials due to the 'FortiBleed' vulnerability (CVE-2022-40684). This vulnerability was publicly disclosed on October 18, 2022, and has been actively exploited since October 11, 2022. The attack has led to...

Multiple Ransomware Attacks Target Various Organizations61.3

In mid-September 2026, several ransomware groups, including Qilin, Storm, and Panzer, published new victims on Ransomware.Live. Affected organizations include Invincible GG, Silicon Integrated Systems, American Casting Company, and several banks. The attacks appear to utilize common ransomware tacti...