Security alert: Fortinet zero-day vulnerability

Fortinet disclosed a critical zero-day (CVE-2024-47575) in FortiManager that enables unauthenticated arbitrary command execution; CISA, AttackerKB, and third parties have observed active exploitation. Customers should apply the available patch immediately or ensure FGFM (FortiGate-to-FortiManager call-home) is not exposed to the internet, and investigate for unexpected devices added to FortiManager as a sign of compromise.