Fortinet fixes a critical TACACS+ authentication bypass flaw (CVE-2025-22252) affecting FortiOS and FortiProxy. Patch now to prevent admin-level access.
FortiProxy
Discover the details of CVE-2024-55591, a critical vulnerability in Fortinet's FortiOS and FortiProxy. Learn how to protect your systems from this authentication bypass flaw.
Discover the cyberattacks attributed to the MirrorFace group in Japan. Learn about their campaigns, targets, and the vulnerabilities they exploit.
CVE-2023-45590 - A "code injection" flaw in FortiClient Linux could allow an attacker to trick a user into visiting a malicious website
FortiOS & FortiProxy: Critical Risks (CVE-2023-42789, CVE-2023-42790) These carry the highest severity ratings (9.8 and 8.1)
CVE-2023-33308 in FortiOS and FortiProxy might allow a remote attacker to execute arbitrary code or commands via carefully crafted packets