New Critical Vulnerability Underscores the Need for Virtual Patching

A critical remote-code-execution vulnerability in FortiOS (CVSS 9.3) affecting Fortinet firewall products and FortiGate SSL VPN has been disclosed and reportedly exploited in the wild; Fortinet has issued a patch. The report underscores the difficulty of rapid patching across distributed devices and recommends cloud-based virtual patching to mitigate exploitation of both new and long-standing vulnerabilities.