Unit 42's PEERSTITCH is a 1,344-byte payload living in the memory of two FortiOS processes. It never calls home. It reads markers out of traffic the firewall was already handling, and writes tags into the other daemon's memory.
1 article — 2026-10-16
IN CISA KEV — ADDED 2024-10-23
Authoritative record
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
CISA added this identifier to its Known Exploited Vulnerabilities catalog on 2024-10-23, which means the agency has evidence of exploitation rather than a judgement that exploitation is possible. US federal agencies were required to remediate it by 2024-11-13.
Unit 42's PEERSTITCH is a 1,344-byte payload living in the memory of two FortiOS processes. It never calls home. It reads markers out of traffic the firewall was already handling, and writes tags into the other daemon's memory.