CVE-2023-27997

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 17, 2025

Last Seen

September 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation79.5

A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...

Massive Redis Cryptomining Botnet Compromises 3,562 Servers71.0

A cryptomining botnet has compromised 3,562 Redis servers, primarily due to missing authentication. The attack targeted a shared list of 12,966 hosts, with a significant success rate of 22-26%. The compromised servers span Redis versions from 2.8.17 to 7.2.0 and various Linux distributions, indicati...

Over 10,000 Fortinet Firewalls Vulnerable to 2FA Bypass Exploits47.1

More than 10,000 Fortinet firewalls remain exposed to a critical two-factor authentication bypass vulnerability (CVE-2020-12812) that has been actively exploited. This flaw, first disclosed in July 2020, continues to pose risks as many devices have not been patched, with ongoing attacks reported rec...

Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities39.7

Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities, tracked as CVE-2025-59718 and CVE-2025-59719, stem from improper verification of crypt...