FortiBleed Targeted FortiGate Firewalls in 110 MillionThe Hacker News·Jun 25, 05:28 UTC · Jun 25, 2026Exploit / PoC60
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flawHelp Net Security·Feb 1, 00:00 UTC · Feb 1, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-24858CVE-2025-8088+1 CVEs60
CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, DThe Hacker News·Jun 27, 05:06 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2024-54085CVE-2024-0769CVE-2019-669360
Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-daysHelp Net Security·Feb 18, 00:00 UTC · Feb 18, 2024Exploit / PoC in the wildCVE-2024-21762CVE-2024-23313CVE-2023-43770+5 CVEs160
Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecastHelp Net Security·Mar 12, 00:00 UTC · Mar 12, 2023Exploit / PoCCVE-2023-27532CVE-2023-25610CVE-2023-21716160
Fortinet plugs critical security hole in FortiNAC, with a PoC incoming (CVE-2022-39952)Help Net Security·Feb 20, 00:00 UTC · Feb 20, 2023Exploit / PoC in the wildCVE-2022-39952CVE-2021-42756CVE-2022-4247560
Chinese Hackers Exploited Recent Fortinet Flaw as 0The Hacker News·Jan 20, 15:58 UTC · Jan 20, 2023Exploit / PoCCVE-2022-4247560
Week in review: Citrix and Fortinet RCEs, Microsoft fixes exploited zero-dayHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2022Exploit / PoCCVE-2022-20968CVE-2022-42475CVE-2022-27518+1 CVEs60
Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022Security Affairs·Oct 18, 07:56 UTC · Oct 18, 2022Exploit / PoC in the wildCVE-2022-4068460
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active AttacksThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2022Exploit / PoC in the wildCVE-2022-40684CVE-2018-1337960
CVE-2022-40684 flaw in Fortinet products is being exploited in the wildSecurity Affairs·Oct 10, 20:47 UTC · Oct 10, 2022Exploit / PoC in the wildCVE-2022-4068460
FortiClient improper access control exposes users' VPN credentialsSecurity Affairs·Dec 14, 13:28 UTC · Dec 14, 2017Exploit / PoCCVE-2017-1418460
FortiBleed Exposes Admin Passwords for 75,000 Fortinet FirewallsSecurity Affairs·Jun 18, 07:31 UTC · Jun 18, 2026Exploit / PoC in the wild60
⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New ThreatsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-1281CVE-2026-134060
Fortinet’s latest zero-day vulnerability carries frustrating familiarities for customersCyberScoop·Jan 29, 04:52 UTC · Jan 29, 2026Exploit / PoC in the wildCVE-2026-24858CVE-2025-5971860
Infosecurity's Top 10 Cybersecurity Stories of 2025Infosecurity Magazine·Jan 1, 08:30 UTC · Jan 1, 2026Exploit / PoC in the wildCVE-2024-5559160
U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalogSecurity Affairs·Dec 20, 10:26 UTC · Dec 20, 2025Exploit / PoC in the wildCVE-2025-14733CVE-2025-59718CVE-2025-59719+1 CVEs60
Fortinet Confirms Exploitation of Critical FortiManager ZeroInfosecurity Magazine·Oct 24, 11:45 UTC · Oct 24, 2024Exploit / PoC in the wildCVE-2024-47575CVE-2024-2311360
Defenders must adapt to shrinking exploitation timelinesHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2024Exploit / PoC in the wildCVE-2023-28121CVE-2023-2799760
U.S. CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 14, 20:47 UTC · Oct 14, 2024Exploit / PoC in the wildCVE-2024-23113CVE-2024-9379CVE-2024-9380+2 CVEs60
China state hackers infected 20,000 Fortinet VPNs, Dutch spy service saysArs Technica · Security·Jun 11, 22:56 UTC · Jun 11, 2024Exploit / PoC in the wildCVE-2022-4247560
CISA warns of Fortinet bug likely being exploited in the wildThe Record·Feb 12, 16:29 UTC · Feb 12, 2024Exploit / PoC in the wildCVE-2024-21762CVE-2024-23313CVE-2024-2311360
Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military NetworkThe Hacker News·Feb 9, 16:01 UTC · Feb 9, 2024Exploit / PoCCVE-2022-4247560
Chinese Hackers Silently Weaponized VMware ZeroThe Hacker News·Jan 22, 01:31 UTC · Jan 22, 2024Exploit / PoCCVE-2023-34048CVE-2023-20867CVE-2022-4132860
RDP and VPN use soars, increasing enterprise cyber riskHelp Net Security·Nov 14, 12:29 UTC · Nov 14, 2023Exploit / PoC in the wildCVE-2019-1573CVE-2019-11510CVE-2018-1337960
Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and TelecomThe Hacker News·Aug 29, 15:43 UTC · Aug 29, 2023Exploit / PoCCVE-2023-286860
Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux SystemsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Exploit / PoCCVE-2023-20867CVE-2023-20887CVE-2023-20888+1 CVEs160
2022 Zero-Day exploitation continues at a worrisome paceSecurity Affairs·Mar 21, 15:28 UTC · Mar 21, 2023Exploit / PoCCVE-2022-24682CVE-2022-1040CVE-2022-30190+5 CVEs60
CISA adds Adobe ColdFusion bug to Known Exploited Vulnerabilities CatalogSecurity Affairs·Mar 16, 08:47 UTC · Mar 16, 2023Exploit / PoC in the wildCVE-2023-26360CVE-2023-23397CVE-2023-24880+1 CVEs60
CISA adds Veeam Backup and Replication bugs to Known Exploited Vulnerabilities CatalogSecurity Affairs·Dec 16, 09:17 UTC · Dec 16, 2022Exploit / PoC in the wildCVE-2022-26500CVE-2022-26501CVE-2022-42475+3 CVEs60
Hackers Actively Exploiting Citrix ADC and Gateway ZeroThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2022Exploit / PoCCVE-2022-27518CVE-2021-22893CVE-2022-42475+3 CVEs60
Advanced hackers use Fortinet flaws in likely attempt to breach government networks, feds warnCyberScoop·Apr 2, 16:59 UTC · Apr 2, 2021Exploit / PoC in the wild60
Attackers are targeting vulnerable Fortigate and Pulse Secure SSL VPNsHelp Net Security·Aug 28, 10:05 UTC · Aug 28, 2019Exploit / PoC in the wildCVE-2019-11510CVE-2018-1337960
Bad Packets warns of over 14,500 pulse secure vpn endpoints vulnerable to CVE-2019Security Affairs·Aug 25, 17:29 UTC · Aug 25, 2019Exploit / PoCCVE-2019-11510CVE-2018-1337960