Fortinet Zero-Day CVE-2024-55591: Super-Admin Risk

Fortinet disclosed CVE-2024-55591, a critical authentication-bypass in FortiOS and FortiProxy (CVSSv3 9.6) exploited via the Node.js WebSocket module; attackers are observed gaining super-admin access, creating administrative/VPN accounts, and using SSL VPN to access internal networks. Fortinet lists affected versions, IoCs (suspicious IPs and log entries), and urgent mitigation steps including upgrading to fixed versions and tightening administrative access.