Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederfilestore.fortinet.com
FortiGuard Labs | FortiGuard Center - IR Advisories
Get the latest updates from FortiGuard Labs | FortiGuard Center - IR Advisories directly as they happen.
Follow now 92 followers
Latest posts
Last updated 21 days ago
Privilege escalation in automation-stitch
21 days ago
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in...
SSH key is added even if operation is aborted
21 days ago
An incomplete cleanup vulnerability [CWE-459] in FortiOS & FortiProxy may allow a...
Privilege escalation in GUI websocket module
21 days ago
An Improper Privilege Management vulnerability [CWE-269] affecting FortiOS, FortiProxy & FortiWeb may...
eap-cert-auth bypass via revoked certificate
21 days ago
An Improper Certificate Validation vulnerability [CWE-295] in FortiOS may allow an EAP...
Improper Handling of Insufficient Permissions or Privileges in GUI websocket
21 days ago
An Improper Handling of Insufficient Permissions or Privileges Vulnerability [CWE-280] in FortiPAM...
Information Disclosure on SSLVPN endpoint
21 days ago
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in...
Multiple OS command injection in Web Vulnerability Scanner
21 days ago
An Improper Neutralization of Special Elements used in an OS Command ('OS...
IPsec improper validation of certificate with host mismatch
21 days ago
An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiClient...
Weak authentication in security fabric daemon
21 days ago
A channel accessible by non-endpoint vulnerability [CWE-300] in FortiOS & FortiProxy may...
Insufficient Access Control Over API Endpoints
21 days ago
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiPortal may allow...
Firewall session injection in FGSP
21 days ago
An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...
Insufficient Session Expiration in SSL-VPN cookie
21 days ago
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN may allow an...