Although Fortinet doesn't call it Patchday, it's releasing several security updates for various products concurrently with the Patchday date. Highly critical flaws are found in FortiWeb, FortiManager, ...

All SAML SSO implementations, including FortiCloud SSO, are vulnerable to authentication bypass and malicious configuration changes from attacks on an unpatched flaw. Fortinet has confirmed that a new ...

Similar to recent FortiCloud single sign-on (SSO) login vulnerabilities, the attacks bypass authentication. Fortinet on Thursday confirmed that recent attacks are bypassing FortiCloud single sign-on ...

Fortinet (NASDAQ: FTNT), a global leader in high-performance network security, today announced the FortiWeb-1000D is one of the industry's top-ranked Web application firewalls, blocking 99.85% of WAF ...

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and steal system configuration files. The two vulnerabilities ...

A large trove of sensitive credentials, authentication keys, configuration data, tokens, and API keys has been potentially exposed by developers using two popular code formatting sites, security ...

Researchers say the flaw, affecting thousands of internet-facing FortiWeb instances, was exploited long before Fortinet disclosed or rated its severity. Security researchers are warning about two ...

CVE-2025-64446 allows unauthenticated attackers to run admin commands on FortiWeb WAF systems Actively exploited in the wild; affects versions 7.0.0–8.0.1, patched in 8.0.2 CISA added it to KEV; ...

A critical Fortinet FortiWeb vulnerability capable of remote code execution has been exploited in the wild. Because the vulnerability is capable of remote code execution in a pre-authentication state ...

Fortinet has confirmed that it has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now "massively exploited in the wild." The flaw was silently ...