Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*

4 briefs RSS
low advisory

Vulnerabilities in Siemens RUGGEDCOM APE1808 via Fortinet Integration

Siemens RUGGEDCOM APE1808 devices are impacted by multiple vulnerabilities (CVE-2026-23573, CVE-2026-59839) within the integrated Fortinet NGFW software, potentially allowing remote code execution or filesystem deletion.

RUGGEDCOM APE1808 +4
2t 2c
high threat

Gunra Ransomware Gang Exploitation of Fortinet Appliances

The Gunra ransomware-as-a-service group is leveraging critical Fortinet vulnerabilities (CVE-2024-55591 and CVE-2025-24472) to gain initial access, hijack VDI sessions, and bypass multi-factor authentication in attacks against critical infrastructure.

FortiOS +1 Gunra ransomware fortinet vpn critical-infrastructure authentication-bypass
4t 2c
critical advisory

Multiple Critical Vulnerabilities in Fortinet Products Lead to RCE and Data Exposure

Multiple critical vulnerabilities (CVE-2025-67862, CVE-2026-25089, CVE-2026-49938) have been discovered across Fortinet products including FortiOS, FortiPortal, FortiProxy, and FortiSandbox, enabling unauthenticated attackers to achieve remote arbitrary code execution and compromise data confidentiality.

FortiOS +11 remote-code-execution data-exfiltration vulnerability fortinet network-appliance
2r 4t 3c 6i
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +38 kerberos coercion dns cve-2025-33073
3r 3t 4c 4i updated