New Fortinet RCE bug is actively exploited, CISA confirms

CISA confirmed active exploitation of a critical Fortinet RCE vulnerability (CVE-2024-21762) affecting FortiOS and FortiProxy; Fortinet released a patch and U.S. federal agencies were ordered to secure affected devices within seven days. The report also covers confusing FortiSIEM CVE disclosures and notes past exploitation of Fortinet flaws by threat actors (e.g., Volt Typhoon) and ransomware groups.