CVSSv3 Score: 4.4 A use of password hash instead of password for authentication vulnerability [CWE-836] in FortiWeb may allow an unauthenticated attacker to use the hash in place of the password to authenticate via crafted...
Read MoreCVSSv3 Score: 6.5 An Unverified Password Change vulnerability [CWE-620] in FortiSOAR may allow an attacker who gained access to a victim’s user account to reset the account credentials without being prompted for the...
Read More
Ransomware actors have targeted manufacturers, retailers, and the Japanese government, with many...
Read MoreCVSSv3 Score: 6.4 An Incorrect Authorization vulnerability [CWE-863] in FortiPortal may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests. Revised on 2025-12-09...
Read More
Proof-of-concept exploit code is publicly available for two other flaws in this month’s...
Read More