Do Son UNC3886 exploited a now-patched vulnerability in FortiOS, alongside a custom malware ecosystem targeting Fortinet devices
CVE-2023-34048
As of January 17, 2024, VMware has reported evidence that the CVE-2023-34048 RCE bug is currently being exploited in attacks
CVE-2023-34048 vulnerability has been discovered in the vCenter Server, specifically in its implementation of the DCERPC protocol