Curated security research, vulnerabilities, advisories and tools for practitioners.

#fortinet

Security coverage tagged fortinet.

1.

API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616

vulnerability | Critical | Actively exploited | 2026-04-07 00:00 | CVE-2026-35616 | bishopfox.com | original ↗ | #vulnerability-research | #authentication-bypass | #certificate-validation

2.

Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643

vulnerability | Critical | Actively exploited | 2026-03-09 00:00 | CVE-2026-21643 | bishopfox.com | original ↗ | #vulnerability-research | #sql-injection | #web-security

3.

KeyPlug Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Company

blog | 2025-04-17 00:00 | hunt.io | original ↗ | #exploitation | #apt41 | #fortinet

4.

Further Adventures in Fortinet Decryption

blog | 2024-03-08 00:00 | bishopfox.com | original ↗ | #reverse-engineering | #encryption | #tooling

5.

February Fortinet Advisory: everything you need to know

blog | 2024-02-12 13:53 | wiz.io | original ↗ | #rce | #vulnerability | #fortinet

6.

Building an Exploit for FortiGate Vulnerability CVE-2023-27997

vulnerability | 2023-10-27 00:00 | CVE-2023-27997 | bishopfox.com | original ↗ | #exploit-development | #heap-overflow | #fortinet

7.

Wiz and Fortinet announce partnership to deliver cloud-native security protection

blog | 2023-09-11 12:55 | wiz.io | original ↗ | #cloud | #cloud-security | #exposure-management

8.

Breaking Fortinet Firmware Encryption

blog | 2023-08-02 00:00 | bishopfox.com | original ↗ | #reverse-engineering | #firmware | #security-research

9.

A More Complete Exploit for Fortinet CVE-2022-42475

vulnerability | 2023-05-17 00:00 | CVE-2022-42475 | bishopfox.com | original ↗ | #rop | #exploit-development | #heap-overflow

10.

Identity Attack Watch: May 2021

blog | 2021-05-28 15:53 | semperis.com | original ↗ | #active-directory | #solarwinds | #news-roundup