FortiProxy — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Multiple Vulnerabilities in FortiCloud SSO Authentication Exposed

  Fortinet reported two vulnerabilities affecting FortiOS, FortiManager, FortiAnalyzer, and FortiProxy related to FortiCloud SSO authentication. The first vulnerability, an Authentication Bypass (CWE-288), allows…

  3 articles · Updated June 22, 2026
• Fortinet Addresses Critical Vulnerabilities in Key Products

  Fortinet has released security updates to address critical vulnerabilities (CVE-2025-59718 and CVE-2025-59719) affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager products. Users and administrators are…

  9 articles · Updated December 12, 2025
• Fortinet FortiWeb CVE-2025-64446 Exploited for Admin Takeover

  A critical path-traversal vulnerability (CVE-2025-64446) in Fortinet's FortiWeb web application firewall has been exploited by threat actors since early October 2025. This flaw allows unauthenticated attackers to create…

  3 articles · Updated December 16, 2025
• Fortinet Addresses Critical Vulnerabilities in Multiple Products

  Fortinet has patched critical vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. These security defects, which allow for authentication bypass and could lead to configuration leaks and code…

  6 articles · Updated January 14, 2026
• Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

  Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code,…

  6 articles · Updated December 10, 2025
• Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities

  Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities,…

  3 articles · Updated December 10, 2025
• Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability

  Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with…

  35 articles · Updated January 23, 2026
• Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

  Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…

  74 articles · Updated November 28, 2025
• Over 25,000 Fortinet Devices Vulnerable to Attacks via FortiCloud SSO

  More than 25,000 Fortinet devices with FortiCloud SSO enabled are exposed to remote attacks due to a critical authentication bypass vulnerability tracked as CVE-2025-59718. The U.S. has the highest number of affected…

  2 articles · Updated December 22, 2025

Recent Intelligence Reports

• FG-IR-25-647 — fortiguard.fortinet.com · June 22, 2026
• FG-IR-25-647 — www.fortiguard.com · June 22, 2026
• FG-IR-26-060 — www.fortiguard.com · June 22, 2026
• SIEM Rules for detecting exploitation of vulnerabilities in FortiCloud SSO — Kaspersky · February 5, 2026
• Fortinet faces second authentication flaw in a fortnight — Sdxcentral · January 31, 2026
• 3,280,081 Fortinet Devices Online With Exposed Web Properties Under Risk — Cybersecuritynews · January 30, 2026
• Fortinet’s latest zero — Cyberscoop · January 28, 2026
• Fortinet confirms new zero — Csoonline · January 23, 2026

Related Entities