Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Fortinet FortiOs
2025 CISA KEV Catalog Hits 1,484 Exploited Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 245 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog in 2025, as the database grew to 1,484 software and hardware flaws at high risk of cyberattacks.
Alert CISA Adds Two Known Exploited Vulnerabilities to Catalog Release Date March 18, 2025 | OpenText Cybersecurity Community
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
NVD - CVE-2025-24472
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
Prism Platform’s Top Active Exploits - May 2023
Prism Platform continuously scans a user’s estate for any issues that are being actively exploited by threat actors in the wild. If any of these vulnerabilities are detected, users are alerted immediately by the platform. In this article, we have rounded up the top active exploits that are currently being monitored by Prism.
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
Edit Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2022100054 Below is a copy: Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::SSH prepend Msf::Exploit::Remote::AutoCheck...
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass Authored by Heyder Andrade, Zach Hanley | Site metasploit.com This Metasploit module exploits an authentication bypass vulnerability in the Fortinet FortiOS, FortiProxy, and FortiSwitchManager API to gain access to a chosen account and then adds an SSH key to the authorized_keys file of the chosen account, allowing you to login to the system with the chosen account. Successful exploitation results in remote code execution.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Fortinet
Contact Fortinet, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack