FortiBleed Exposes Admin Passwords for 75,000 Fortinet FirewallsSecurity Affairs·Jun 18, 07:31 UTC · Jun 18, 2026Exploit / PoC in the wild60
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attackHelp Net Security·Jun 21, 00:00 UTC · Jun 21, 2026Vulnerability in the wildCVE-2026-20262CVE-2026-48558CVE-2026-39813+3 CVEs160
Week in review: AWS S3 data encrypted without ransomware, data of 15k Fortinet firewalls leakedHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2025Ransomware in the wildCVE-2024-55591CVE-2025-0282CVE-2024-734460
Week in review: 3FA, Fortinet firewalls under attack, and the riskiest connected devicesHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2022Exploit / PoC in the wildCVE-2022-41033CVE-2022-40684CVE-2022-36067+1 CVEs160
Researchers release PoC for Fortinet firewall flaw, exploitation attempts mountHelp Net Security·Oct 14, 00:00 UTC · Oct 14, 2022Exploit / PoC in the wildCVE-2022-4068460
48,000+ internet-facing Fortinet firewalls still open to attackHelp Net Security·Jan 22, 00:00 UTC · Jan 22, 2025Exploit / PoC in the wildCVE-2024-5559160
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet FirewallsInfosecurity Magazine·Feb 23, 12:30 UTC · Feb 23, 2026Threat actor in the wildCVE-2019-7192CVE-2023-27532CVE-2024-40711160
Attackers exploit a new zeroSecurity Affairs·Feb 11, 23:06 UTC · Feb 11, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2024-55591160
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekThe Hacker News·Jun 19, 13:44 UTC · Jun 19, 2026Vulnerability in the wildCVE-2026-39813CVE-2026-39808CVE-2026-25089+1 CVEs60
CISA Warns of Active Exploitation Following FortiBleed LeakSecurity Affairs·Jun 20, 08:27 UTC · Jun 20, 2026Advisory in the wild60
Fortinet’s latest zero-day vulnerability carries frustrating familiarities for customersCyberScoop·Jan 29, 04:52 UTC · Jan 29, 2026Exploit / PoC in the wildCVE-2026-24858CVE-2025-5971860
Infosecurity's Top 10 Cybersecurity Stories of 2025Infosecurity Magazine·Jan 1, 08:30 UTC · Jan 1, 2026Exploit / PoC in the wildCVE-2024-5559160
Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?Help Net Security·Jan 27, 23:23 UTC · Jan 27, 2026Vulnerability in the wildCVE-2025-59718CVE-2025-5971960
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed InterfacesThe Hacker News·Jan 28, 13:09 UTC · Jan 28, 2025Exploit / PoC in the wildCVE-2024-5559160
Fortinet patches pre-auth RCE, update your Fortigate firewalls ASAP! (CVE-2023-27997)Help Net Security·Jun 14, 07:38 UTC · Jun 14, 2023Vulnerability in the wildCVE-2023-2799760
Researchers warn of hackers widely exploiting bug in Zyxel hardwareThe Record·Jun 1, 12:30 UTC · Jun 1, 2023Exploit / PoC in the wildCVE-2023-28771CVE-2023-33009CVE-2023-3301060
Fortinet Issues Patches for 40 Flaws Affecting FortiWeb, FortiOS, FortiNAC, and FortiProxyThe Hacker News·Feb 23, 03:50 UTC · Feb 23, 2023Vulnerability in the wildCVE-2022-39952CVE-2021-4275660
Experts: Exposed NSA cyber weapons posted for auction appear legitCyberScoop·Aug 16, 18:00 UTC · Aug 16, 2016Exploit / PoC in the wild60
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2025-30066CVE-2024-5559160
New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote AccessThe Hacker News·Mar 9, 05:23 UTC · Mar 9, 2023Exploit / PoC in the wildCVE-2023-25610CVE-2022-39952CVE-2021-4275660
Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858)Help Net Security·Jan 28, 00:00 UTC · Jan 28, 2026Exploit / PoC in the wildCVE-2026-24858CVE-2025-5971860
'Mora_001' ransomware gang exploiting Fortinet bug spotlighted by CISA in JanuaryThe Record·Mar 17, 14:17 UTC · Mar 17, 2025Ransomware in the wildCVE-2024-55591CVE-2025-2447260
Fortinet fixes FortiOS zero-day exploited by attackers for months (CVE-2024-55591)Help Net Security·Jan 17, 09:05 UTC · Jan 17, 2025Exploit / PoC in the wildCVE-2024-5559160
87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113)Help Net Security·Oct 15, 00:00 UTC · Oct 15, 2024Vulnerability in the wildCVE-2024-2311360
CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in yearsThe Record·Jan 17, 01:12 UTC · Jan 17, 2025Vulnerability in the wildCVE-2024-55591CVE-2025-21333CVE-2025-2133460
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
Palo Alto Networks Confirms New ZeroInfosecurity Magazine·Nov 15, 15:30 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-591060
The ransomware economy is shifting toward straightCyberScoop·Mar 16, 14:25 UTC · Mar 16, 2026Ransomware in the wild60
Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)Help Net Security·Jul 19, 15:00 UTC · Jul 19, 2025Vulnerability in the wildCVE-2025-2525760
336,000 servers remain unpatched against critical Fortigate vulnerabilityArs Technica · Security·Jul 3, 19:46 UTC · Jul 3, 2023Vulnerability in the wildCVE-2023-2799760
Brute-force attacks hammer Fortinet devices worldwideHelp Net Security·Aug 14, 00:00 UTC · Aug 14, 2025Exploit / PoC in the wild60
Edge device vulnerabilities fueled attack sprees in 2024CyberScoop·Feb 19, 12:01 UTC · Feb 19, 2025Vulnerability in the wildCVE-2023-46805CVE-2024-21887CVE-2024-3400+3 CVEs60
Week in review: Exploited zero-day in Cisco email security appliances, Kali Linux 2025.4 releasedHelp Net Security·Dec 21, 00:00 UTC · Dec 21, 2025Exploit / PoC in the wildCVE-2025-59718CVE-2025-40602CVE-2025-14174+1 CVEs160
Fortinet urges customers to immediately fix a critical authentication bypass flaw in FortiGate and FortiProxySecurity Affairs·Oct 7, 14:38 UTC · Oct 7, 2022Vulnerability in the wildCVE-2022-4068460
Fortinet’s delayed alert on actively exploited defect put defenders at a disadvantageCyberScoop·Nov 17, 21:01 UTC · Nov 17, 2025Exploit / PoC in the wildCVE-2025-6444660
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flawHelp Net Security·Feb 1, 00:00 UTC · Feb 1, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-24858CVE-2025-8088+1 CVEs60
Fortinet plugs critical security hole in FortiNAC, with a PoC incoming (CVE-2022-39952)Help Net Security·Feb 20, 00:00 UTC · Feb 20, 2023Exploit / PoC in the wildCVE-2022-39952CVE-2021-42756CVE-2022-4247560
Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin AccountsThe Hacker News·Nov 17, 14:23 UTC · Nov 17, 2025Vulnerability in the wildCVE-2025-6444660
Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warnsSecurity Affairs·Sep 8, 12:06 UTC · Sep 8, 2023Threat actor in the wildCVE-2022-47966CVE-2022-42475CVE-2021-4422860