Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiOS and FortiProxy
EPSS: 0.944 (99.9th percentile, 2026-10-30)
Known ransomware use: Known
FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to the Node.js websocket module. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-01-14, and it is known to be used in ransomware attacks.
Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.
| Date | Event | Source |
|---|---|---|
| 2025-01-14 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.