Critical RCE vulnerabilities in FortiOS exploited in-the-wild: everything you need to know

This advisory describes two critical Fortinet vulnerabilities—CVE-2024-21762 (buffer over-read/overflow via SSL-VPN parameter validation) and CVE-2024-23113 (format-string flaw in the fgfmd daemon)—both enabling remote unauthenticated code execution; CVE-2024-21762 is reportedly exploited in the wild and added to CISA's KEV. The report lists affected FortiOS/FortiProxy/FortiPAM versions with remediation paths, recommends immediate patching (or workarounds such as disabling SSL VPN or removing FGFM access if patching is not possible), and notes Wiz telemetry estimating 8% of cloud environments have vulnerable resources and 5% have publicly exposed instances.