Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused by a threat actor to achieve remote code execution.
The vulnerability, tracked as CVE-2023-27997, is « reachable pre-authentication, on every SSL VPN appliance, » Lexfo Security researcher Charles Fol, who discovered and reported the flaw, said in a tweet over the weekend.
Details

Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused by a threat actor to achieve remote code execution.
The vulnerability, tracked as CVE-2023-27997, is « reachable pre-authentication, on every SSL VPN appliance, » Lexfo Security researcher Charles Fol, who discovered and reported the flaw, said in a tweet over the weekend.
Details