CISA says critical Fortinet RCE flaw now exploited in attacks

CISA warns that CVE-2024-23113, a critical unauthenticated remote code execution flaw in Fortinet's fgfmd daemon affecting FortiOS, FortiPAM, FortiProxy, and FortiWeb, is being actively exploited; Fortinet issued patches and mitigations in February, and CISA added the issue to its Known Exploited Vulnerabilities catalog requiring federal agencies to remediate within three weeks.