#fortiweb

0 stories this week · 3 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Group-IB and NyxLab say k0t used FortiWeb and PAN-OS flaws, then remote-access tools and cloud exfiltration, from February to June 2026.

Exploited4 min readfortinet palo-alto

GBHackers20d agohigh

Group-IB reports more than 70,000 exposed credentials and active use of CVE-2025-64446 and CVE-2026-0257.

Exploited4 min readfortiweb fortigate

Group-IB and NyxLab tie the edge-device campaign to k0t and report more than 70,000 exposed credentials.

Exploited6 min readfortigate fortiweb

FortiWeb WAF policies can be bypassed by unauthenticated attackers using crafted Content-Encoding requests (CVSS 4.8).

Fortinet PSIRTAug 12, 2026high

FortiWeb RADIUS admin authentication flaw (CVSS 8.8) permits remote GUI/CLI login with random credentials under specific non-default settings.

Stories tagged #fortiweb