Threat Watch– active
All incidents
More on Threat Watch
More Fortinet incidents
- Fortinet patch batch: FortiOS OSPF auth bypass, FortiAuthenticator hard-coded password & auth flaws Critical · Patch now
- FortiMail critical flaws: unauth command injection, SQL injection, IBE session hijack; FortiOS sshd auth bypass Critical · Patch now
- Sogou Input Method: DNS-hijacked plaintext config fetch deploys DarkVigil backdoor (CVE-2026-120422) High · Patch now
- Volt Typhoon 'Silent Train': relay chains used to exploit zero-days in SD-WAN and IT-management tools Critical · Breach
- Fortinet: critical/high fixes in FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator (Nov 10) Critical · Patch now · Closed
- Fortinet FortiSIEM: Public PoC exploit released for unauthenticated RCE via path traversal and NUL-byte file overwrite (CVE-2026-106173) Critical · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.