CVE-2024-48886

Summary

CVE-2024-48886 is a critical vulnerability affecting various Fortinet FortiOS and FortiProxy versions, as well as FortiManager, FortiManager Cloud, and FortiAnalyzer Cloud. The weakness lies in the system's authentication process, which can be exploited through brute-force attacks. An attacker who successfully executes such an attack can gain unauthorized access and run arbitrary code or commands on the vulnerable Fortinet devices. This issue poses a serious risk to organizations using the affected Fortinet products and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.