Skip to content
Threat Feed
Subscribe

Product

FortiAnalyzer

3 briefs RSS
high advisory

SQL Injection Vulnerabilities in Fortinet FortiAnalyzer and FortiManager

Multiple vulnerabilities in Fortinet FortiAnalyzer and FortiManager enable remote, unauthenticated attackers to perform SQL injection attacks, potentially resulting in unauthorized data access.

FortiAnalyzer +1 vulnerability webserver fortinet
1t
medium threat

Fortinet FortiAnalyzer and FortiManager Vulnerability Allows Denial of Service

A remote, authenticated attacker can exploit a vulnerability in Fortinet FortiAnalyzer and FortiManager to perform a denial-of-service attack, disrupting normal operations.

FortiAnalyzer +1 denial-of-service fortinet network
2r 1t
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +38 kerberos coercion dns cve-2025-33073
3r 3t 4c 4i updated