More than 133,000 Fortinet appliances still vulnerable to month-old critical bug

Fortinet appliances remain widely exposed to CVE-2024-21762, a critical (9.6) remote code execution vulnerability with proof-of-concept code and active exploitation; Shadowserver reports over 133,000 internet-facing devices still vulnerable, prompting strong patching guidance and CISA action. The report also calls out other recent critical Fortinet flaws (such as CVE-2023-48788) and notes interest from state-aligned actors like Volt Typhoon, compounding the risk to affected networks.