Fortinet warns about FortiSIEM vulnerability with in-the-wild exploit code (CVE-2025-25256)
60
Vulnerability3 · 1 read
CVE-2024-23108
- CVSS 3.1
- 9.8 critical
- EPSS
- 78%p100
- Published
- ·
- Modified
Description · NVD
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.
In the news
7 storiesWeek in review: Attackers trying to access Check Point VPNs, NIST CSF 2.0 security metrics evolution
60
60
60
60
60
60