CVE-2023-25610 a critical RCE vulnerability in FortiOS: everything you need to know

**Executive Summary:** CVE-2023-25610 is a critical unauthenticated remote code execution (buffer underwrite) vulnerability in FortiOS and FortiProxy administrative interfaces affecting multiple major versions; a public proof-of-concept was published and Wiz reports ~9% of cloud enterprise environments are susceptible with many FortiOS instances unpatched, so operators should upgrade to the listed patched versions or apply the provided mitigation steps.