FortiGate management interface RCE exploited before patch availability
·VulnerabilityCritical
A pre-auth remote code execution vulnerability in FortiGate HTTPS management was actively exploited by multiple threat actors within 48 hours of disclosure, with mass scanning beginning immediately.
Deception angle
A decoy FortiGate on port 443 captures every probe and exploit attempt in real time, letting you correlate scanner IPs against your real infrastructure before those IPs rotate. The FortiGate profile also catches CVE-specific path patterns.
Read about Kandaro Deception, or browse more security news.