PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần I

blog.viettelcybersecurity.com | blog | #rce | #vulnerability | #patching | #fortinet | #fortios | #exposure | #fortiproxy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part I warns that thousands of exposed FortiOS/FortiProxy devices remain unpatched against critical unauthenticated RCE flaws (CVE-2023-33308, CVE-2023-27997, CVE-2022-42475, CVE-2022-40684).
Published
Collected

Related coverage

vulnerability · blog.viettelcybersecurity.com
[CVE-2022-42475] Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần II
Part II details CVE-2022-42475, a heap buffer overflow in Fortinet's SSL-VPN (sslvpnd) from integer overflow in Content-Length handling, allowing unauthenticated RCE on FortiOS/FortiProxy.
blog · wiz.io
February Fortinet Advisory: everything you need to know
Fortinet urges patching of two critical FortiOS and FortiProxy RCE flaws—CVE-2024-21762 (CVSS 9.6, exploited in the wild) and CVE-2024-23113 (CVSS 9.8); the former is now in CISA's KEV.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
vulnerability · hunt.io
Hunting Leaked PHP2Shell RCE Across Open Directories (CVE-2026-109618, CVE-2026-109619)
Two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619, leaked pre-patch. We map the exposed PHP footprint and hunt open directories for exploitation.
Back