CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability. Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
- CISA KEV-listed (remediation due 2025-01-21)
- used in ransomware campaigns
- EPSS 98.3% (99.9% percentile)
- CVSS 9.8 critical
Related briefings
- Colombia warns on Gentlemen ransomware as 30 victims land in a day 2026-07-26
- The Gentlemen ransomware lures affiliates with rare 90 percent payouts 2026-07-11
- 166 Victims in 33 Countries: NightSpire's Global Expansion in Numbers 2026-03-15
- Spectral Flux (NightSpire): Threat Actor Profile and Technical Analysis 2026-03-07
- NightSpire Kill Chain: How a FortiOS Zero-Day Became Ransomware's Favorite Front Door 2026-02-01