Search: “fgfm”

15 stories

FortiManager FGFM flaw (CVSS 7.3) lets an attacker with a valid certificate impersonate any managed FortiGate under a specific CLI option.

Fortinet advisory FG-IR-26-160 describes an authentication bypass via alternate path (CWE-288) in FortiManager and FortiManager Cloud, scored CVSSv3 7.3. A remote unauthenticated attacker holding a valid certificate can impersonate any FortiGate managed by the affected FortiManager when a specific CLI option is set. The impersonation is performed with crafted FGFM protocol requests. The advisory was revised on 2026-08-12 and does not report active exploitation.

Fortinet PSIRTAug 12, 07:00 UTC · Aug 12, 2026Advisory

Search: “fgfm”

FGFM Authentication Weakening via CLI Configuration

87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113)

Fortinet bug allows unauthenticated hackers to run code as root

Brute-force attacks hammer Fortinet devices worldwide

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet releases patches for publicly undisclosed critical FortiManager vulnerability

FortiJump flaw CVE-2024-47575 has been exploited in zero

FortiGate admins report active exploitation 0

Fortinet plugs RCE hole in FortiManager and FortiAnalyzer (CVE-2021-32589)

Fortinet Warns Exploit Code Available for Critical Vulnerability

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

Fortinet warns of active campaign exploiting bug in FortiManager products

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero

Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762)

Advanced actor targets Fortinet FortiOS in attacks on govt entities