CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability. Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
- CISA KEV-listed (remediation due 2025-01-21)
- used in ransomware campaigns
- EPSS 98.3% (99.9% percentile)
- CVSS 9.8 critical
Related briefings
- FBI and CISA warn of Gunra ransomware hitting hospitals 2026-08-10
- Colombia warns on Gentlemen ransomware as 30 victims land in a day 2026-07-26
- The Gentlemen ransomware lures affiliates with rare 90 percent payouts 2026-07-11
- 166 Victims in 33 Countries: NightSpire's Global Expansion in Numbers 2026-03-15
- Spectral Flux (NightSpire): Threat Actor Profile and Technical Analysis 2026-03-07
Linked threat actors
- NightSpire machine-inferred link
- The Gentlemen machine-inferred link
- Everest machine-inferred link
- Gunra machine-inferred link