Security alert: critical Fortigate remote code execution vulnerability

Fortinet released a June 9, 2023 patch for CVE-2023-27997, a critical (CVSS 9.8) unauthenticated remote code execution vulnerability affecting FortiGate firewalls when SSL‑VPN is enabled; the advisory urges immediate patching, disabling SSL‑VPN if unused, following Fortinet hardening guidance, and using vulnerability scanners to verify remediation, noting prior exploitation of FortiGate flaws by state-linked actors.