CVE-2024-47575

Arctic Wolf published an advisory about Fortinet CVE-2024-47575: a critical, actively exploited unauthenticated remote code execution vulnerability in FortiManager and FortiManager Cloud (internet-exposed on port 541). The advisory urges removing public exposure, upgrading to specified fixed versions, applying vendor workarounds as needed, and ensuring Fortinet logs are configured for monitoring; Fortinet confirmed in-the-wild exploitation but no public proof-of-concept was available as of October 23, 2024.