Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

February Fortinet Advisory: everything you need to know

wiz.io | blog | #rce | #vulnerability | #fortinet | #fortios | #cve-2024-21762 | #cve-2024-23113

Summary

Fortinet urges patching of two critical FortiOS and FortiProxy RCE flaws—CVE-2024-21762 (CVSS 9.6, exploited in the wild) and CVE-2024-23113 (CVSS 9.8); the former is now in CISA's KEV.
Published
Collected

original ↗

Related coverage

  1. Further Adventures in Fortinet Decryption (bishopfox.com)
  2. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  3. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  4. Critical vulnerabilities in Palo Alto Expedition: everything you need to know (wiz.io)
  5. SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts (wiz.io)
  6. The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate (wiz.io)

back