NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways
– Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.
Read MoreFortinet
Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability (CVE-2026-24018)
– This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient.
Read More
Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability (CVE-2025-64447)
– This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiWeb.
Read More
Fortinet FortiWeb cgi_httpcontentrouting_post Directory Traversal Remote Code Execution Vulnerability (CVE-2025-25254)
CVE-2025-25254- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb.
Read More
Fortinet FortiWeb cgi_xmlprotection_xmlschemafile_post Directory Traversal Arbitrary File Write Vulnerability (CVE-2024-55597)
This vulnerability allows remote attackers to create arbitrary XML schema files on affected installations of Fortinet FortiWeb.
Read More
BT launches a new managed SASE service powered by Fortinet
Customers can combine networking and security into a single, cloud-delivered managed SASE service protecting access to digital services BT has
Read More
Joint advisory highlights Microsoft Exchange and Fortinet vulnerabilities
An Iranian actor, assessed to be government sponsored, is exploiting known CVEs against multiple sectors. The advisory, issued by the
Read More
FortiOS system file leak through SSL VPN via specially crafted HTTP resource requests
We are aware of the possible exposure of passwords on Fortinet devices that are vulnerable to CVE 2018-13379. Exploitation of
Read More