Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederfortiguard.com
FortiGuard Labs | FortiGuard Center - IR Advisories
Get the latest updates from FortiGuard Labs | FortiGuard Center - IR Advisories directly as they happen.
Follow now 82 followers
Latest posts
Last updated 21 days ago
Telemetry protocol authentication is based over VDOM and FCTUID
21 days ago
An improper authentication vulnerability [CWE-287] in FortiClientEMS telemetry protocol may allow an...
Insufficient Session Expiration in SSL-VPN cookie
21 days ago
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN may allow an...
Privilege escalation in GUI websocket module
21 days ago
An Improper Privilege Management vulnerability [CWE-269] affecting FortiOS, FortiProxy & FortiWeb may...
Information Disclosure on SSLVPN endpoint
21 days ago
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in...
eap-cert-auth bypass via revoked certificate
21 days ago
An Improper Certificate Validation vulnerability [CWE-295] in FortiOS may allow an EAP...
IPsec improper validation of certificate with host mismatch
21 days ago
An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiClient...
Privilege escalation in automation-stitch
21 days ago
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in...
Firewall session injection in FGSP
21 days ago
An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...
SSH key is added even if operation is aborted
21 days ago
An incomplete cleanup vulnerability [CWE-459] in FortiOS & FortiProxy may allow a...
Weak authentication in security fabric daemon
21 days ago
A channel accessible by non-endpoint vulnerability [CWE-300] in FortiOS & FortiProxy may...
Insufficient Access Control Over API Endpoints
21 days ago
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiPortal may allow...
Improper Handling of Insufficient Permissions or Privileges in GUI websocket
21 days ago
An Improper Handling of Insufficient Permissions or Privileges Vulnerability [CWE-280] in FortiPAM...