vendors/fortinet.htmlSecurity news, advisories and CVEs for FortinetMon, 19 Oct 2026 12:28:44 GMT https://www.securityweek.com/exploited-fortinet-bug-linked-to-stealthy-fortigate-implant-in-telecom-hack/r60kanMon, 19 Oct 2026 11:13:23 GMTSecurityWeek. The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.VulnerabilityMalware https://securityaffairs.com/201178/security/u-s-cisa-adds-fortinet-multiple-products-and-beyondtrust-remote-support-flaws-to-its-known-exploited-vulnerabilities-catalog.htmlxxu9uSat, 17 Oct 2026 10:35:48 GMTSecurity Affairs. U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the…Vulnerability https://news.google.com/rss/articles/CBMigwFBVV95cUxQSjBMbEZ2dzlhT3JWVndYekZKLXctaEdHWlZDR0hWQ2FGN3B1ZkNSN3BkQWZjVHdBdHVzM0lxZXNIQmN6aDUxWXlTano5RVVRNlNoLUxqUnM5VmN2NlcxdERady1EYmJ0cGRTMEUzSmZ3ekJ0bWgyUDhjdkZ5QXE4dW1sc9IBiAFBVV95cUxNcHVxWkdyMG9QdU04RFpIX1l6S2RMR0R1LVhVN1pMQmVab2tZNmpJZGFFTEZ3OF94Qzgtck9kN0lVbTF1RDZmZFZtaEpOZlZXVDFsUFpHQklia0V3OXZMc0l1VWRtUUtnZ3REN2ZwbXJOQzFDWk9Qd21wdExmSHVTYlNySTlYZFpD?oc=51qxku6Sat, 17 Oct 2026 06:41:48 GMTCybersecurity News. PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability CyberSecurityNewsVulnerability https://securityaffairs.com/201077/malware/peerstitch-malware-how-attackers-compromised-500-firewalls-through-fortimanager.html1mpulbqFri, 16 Oct 2026 09:08:57 GMTSecurity Affairs. PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged intrusion, helped attackers maintain access to a telecom…Malware https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.htmlc03lkbFri, 16 Oct 2026 04:59:36 GMTThe Hacker News. A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4),…VulnerabilityMalwareZero-day https://cybersecuritynews.com/fortinet-vulnerabilities/qf4rntThu, 15 Oct 2026 12:22:12 GMTCybersecurity News. Attackers compromised a telecommunications managed service provider by exploiting vulnerabilities in Fortinet’s centralized management and firewall systems, then deployed PEERSTITCH, a stealthy malware implant that runs inside FortiGate processes. Unit 42…VulnerabilityMalware https://cybersecuritynews.com/poc-released-for-forticlient-ems-vulnerability/1302hfyThu, 15 Oct 2026 09:47:55 GMTCybersecurity News. A public proof-of-concept (PoC) for CVE-2026-35616, a critical authentication and authorization bypass in Fortinet FortiClient Endpoint Management Server (EMS), lets defenders test whether affected systems are exposed. The Python tool’s repository says the…VulnerabilityZero-day http://www.zerodayinitiative.com/advisories/ZDI-26-772/obvy1wThu, 15 Oct 2026 05:00:00 GMTZDI Published Advisories. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are…AdvisoryVulnerability https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/cddqz0Wed, 14 Oct 2026 22:00:44 GMTUnit 42. We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.ResearchMalwareVulnerability https://www.securityweek.com/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products/1ui5s7sWed, 14 Oct 2026 07:26:35 GMTSecurityWeek. Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.Vulnerability https://cybersecuritynews.com/fortisandbox-gui-vulnerability/20ct1fTue, 13 Oct 2026 17:54:42 GMTCybersecurity News (+1 more sources). Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access protected functions without valid credentials. Tracked as CVE-2026-107656, the flaw carries a reported CVSSv3…VulnerabilityAdvisory https://www.securityweek.com/fortibleed-attackers-locking-victims-out-of-fortinet-devices/1jj13hhThu, 08 Oct 2026 07:52:33 GMTSecurityWeek. Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. https://www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/1n6l5h0Wed, 07 Oct 2026 21:28:54 GMTBleepingComputer. The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]Law & policy https://www.helpnetsecurity.com/2026/10/07/fortinet-fortibleed-campaign-fbi-advisory/16hr7urWed, 07 Oct 2026 13:43:09 GMTHelp Net Security. Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The…Vulnerability https://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.html18yljg6Wed, 07 Oct 2026 11:56:56 GMTThe Hacker News. The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual…Law & policy https://www.cybersecuritydive.com/news/fortinet-critical-flaw-fortimail-exploitation/832017/g8sxyfFri, 02 Oct 2026 14:56:00 GMTCybersecurity Dive. Security researchers said that attackers can gain access to credentials, stored mail and other connected systems.Vulnerability https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/12p8822Thu, 01 Oct 2026 22:42:49 GMTBleepingComputer (+4 more sources). Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]VulnerabilityZero-day