Hackers have a pool of almost 150,000 vulnerable Fortinet FortiOS and FortiProxy instances which they can use to execute malicious code without authentication, experts have warned.
A month ago, Fortinet released a patch for a critical vulnerability tracked as CVE-2024-21762 (severity score 9.8), but it seems many admins aren’t diligently installing the fixes. To make matters worse, this flaw was already added to Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV), meaning hackers are actively taking advantage of it.
