grep -rl "fortinet" ./articles
Fortinet's advisory of 1 October describes two weaknesses in one request: a path traversal and improper handling of the null byte. Together they let an unauthenticated attacker write files anywhere on a mail gateway that exists to face the internet. It is exploited, it scores 9.8, and the 7.2 branch has no fix at all.
CISA gave agencies until 12 September to deal with exploited flaws in Cisco's firewall manager, Citrix NetScaler and FortiOS. Talos's research shows the Qilin-linked cluster ignored the CVSS 10.0 bypass and used a hard-coded password flaw CISA had listed in July — and the federal instruction for all of it starts with evidence, not the patch.
51 victims since April 2025, mostly outside North America, exploiting a 2024 Schneider Electric flaw and a 2025 Fortinet one. The advisory is worth reading for what it says about which patches actually matter.