Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
Fortinet2Shell
Vulnerability
Threat entity extracted from intelligence sources
Nov 6: 0 mentions
Nov 7: 0 mentions
Nov 8: 0 mentions
Nov 9: 0 mentions
Nov 10: 0 mentions
Nov 11: 2 mentions
Nov 12: 2 mentions
Nov 6
Nov 9
Nov 12
Entities
›
vulnerability
›
Fortinet2Shell
Frequency
4
occurrences
First Seen
November 11, 2026
Last Seen
November 12, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
Citrus
Associated Malware
EKZ
SCKit
Tools Used
Gitleaks
Metasploit
Nmap
PowerShell
ScreenConnect
Shodan
Sqlmap
WinRM
Related CVEs
CVE-2026-121529
MITRE Techniques
T1021 - Remote Services
T1053 - Scheduled Task/Job
T1059.001 - PowerShell
T1059.003 - Windows Command Shell
T1543.003 - Windows Service
Campaigns
BluePhishing
Affected Platforms
Windows
Active Directory
FortiClient
MacOS
MSP360
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
2
EX
Execution
T1053 - Scheduled Task/Job
T1059.001 - PowerShell
1
PE
Persistence
T1543.003 - Windows Service
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
1
LM
Lateral Mov
T1021 - Remote Services
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
4
techniques detected across
3
tactics
Related Clusters (3)
Critical Fortinet2Shell Vulnerability Allows Remote Code Execution via Malicious Websites
20h ago
·
2 sources
71
Fortinet Patches Critical FortiClient Vulnerability CVE-2026-121529
7h ago
·
2 sources
58
AI Hacking Frameworks Exposed: 1,428 Services Found Online
20h ago
·
2 sources
52
Related Articles (4)
Fortinet patches raft of vulnerabilities, but is 'security through obscurity' enough?
Cyberdaily.Au
·
7h ago
New SCKit Worm Targets ConnectWise ScreenConnect, Infecting 288 Endpoints Across 48 Organizations
Gbhackers
·
8h ago
Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites
Gbhackers
·
1d ago
Researchers Uncover 45 AI Hacking Frameworks, With Hundreds of Attack Consoles Exposed on the Internet
Gbhackers
·
1d ago
Related Entities
Malware
Sql Injection
Worm
BluePhishing
ConnectWise
Fortinet
CVE-2026-121529
CWE-287 - Improper Authentication
CWE-346 - Origin Validation Error
CWE-89 - SQL Injection
EKZ
SCKit
