Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiOS
EPSS: 0.295 (98.2th percentile, 2026-10-30)
A FortiOS flaw lets an attacker who has already compromised the device at the filesystem level, through a separate vulnerability, bypass Fortinet’s fix for the symbolic-link persistence technique seen in post-exploitation cases; the bypass itself needs no authentication and uses crafted HTTP requests. CISA added it to KEV on 2026-07-27, confirming exploitation in the wild.
Reviewed by PerimeterClock.
| Date | Event | Source |
|---|---|---|
| 2026-07-27 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.