Hosted on MSN

The Fortinet hole, rated 9.1, lets an unauthenticated attacker run commands through a single crafted request, and a full patch is still pending

Organizations running Fortinet FortiWeb, the company’s web application firewall, face an immediate threat: a single crafted HTTP or HTTPS request can give an unauthenticated attacker the ability to ...
BleepingComputer

Hackers exploit FortiClient EMS flaw to push infostealer malware

Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. The attacker ...
Help Net Security

74,000 Fortinet firewall credentials exposed in FortiBleed data leak

A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally ...
techtimes

Fortinet FortiGate Credential Leak Hits 73,932 Firewalls: Half the Internet-Facing Fleet

A newly disclosed credential dataset dubbed FortiBleed exposes verified usernames and passwords for 73,932 FortiGate firewall URLs spanning 194 countries — roughly half of every internet-facing ...