CISA Flags CVE-2024-47575 Vulnerability In FortiManager

This report details CVE-2024-47575, a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in Fortinet FortiManager and FortiManager Cloud affecting numerous versions; its addition to CISA’s KEV catalog indicates active exploitation. Recommended actions include rebuilding or resynchronizing FortiManager databases or using the Quick Recovery option with manual verification, restoring pre-compromise backups, upgrading to fixed versions, enabling deny-unknown-device configurations, applying local-in policies and custom certificates where applicable, and following standard patching, segmentation, and incident response best practices.