VulnRadar

Data against noise.

Built with NaN
Page generated: 08 Nov 2026, 10:27 UTC
← Dashboard

CVE-2024-47575

FortiGate

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 thr…

Read full description
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
7.0/10
REALITY · THREAT PRIORITY
8.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.8: +1.47
  • Fresh EPSS: 94.77%: +0.47

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 38 documents and public datasets.

Hype components

Headline sample (25%)
50/100
Press, 30 days (60%)
70/100
Grounded branding (15%)
100/100
HYPE TOTAL70/100

Sources and documents

Industrial Cyber
Press · 30 Oct 2026, 07:02 · Fortinet FortiAIGate targets AI security risks with real-time inspection, policy enforcement and agent controls - Industrial Cyber
Technology Decisions
Press · 29 Oct 2026, 01:24 · Fortinet adds AI inspection capabilities to FortiGate - Technology Decisions
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 28 Oct 2026, 09:49 · Security Alert - FortiBleed 2.0 Reveals Additional FortiGate Configuration and Credential Exposure - Hong Kong Computer Emergency Response Team Coordination Centre
InfoStealers
Press · 27 Oct 2026, 12:28 · FortiBleed 2.0: 975 New Domains & 40,573 Exposed Secrets - Claim Your Ethical Disclosure - InfoStealers
ITP.net
Press · 27 Oct 2026, 09:09 · Fortinet Launches AI Security Service for FortiGate Customers - ITP.net
See all 38 source documents
Techzine Global
Press · 27 Oct 2026, 08:41 · Fortinet expands FortiGate with AI security - Techzine Global
SecurityBrief Australia
Press · 27 Oct 2026, 01:32 · Fortinet launches AI security service for FortiGate - SecurityBrief Australia
The Hacker News
Press · 23 Oct 2026, 13:50 · Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials - The Hacker News
SecurityWeek
Press · 19 Oct 2026, 07:00 · Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack - SecurityWeek
The Hacker News
Press · 16 Oct 2026, 07:00 · PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions - The Hacker News
Unit 42
Press · 14 Oct 2026, 22:00 · Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42
Press · 14 Oct 2026, 22:00 · Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42
Press · 14 Oct 2026, 07:00 · Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant - Unit 42
BleepingComputer
Press · 07 Oct 2026, 07:00 · FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins - BleepingComputer
Cybersecurity Dive
Press · 07 Oct 2026, 07:00 · FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users - Cybersecurity Dive
SOCRadar
Press · 08 Sep 2026, 07:00 · CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT - SOCRadar
wiz.io
Press · 22 Jul 2026, 07:00 · Agentless Threat Hunting Guide for FortiGate Devices | Wiz Blog - wiz.io
Recorded Future
Press · 24 Jun 2026, 07:00 · FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems - Recorded Future
The Hacker News
Press · 23 Jun 2026, 07:00 · FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation - The Hacker News
The Hacker News
Press · 19 Jun 2026, 07:00 · CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices - The Hacker News
Bitsight
Press · 18 Jun 2026, 07:00 · Major Security Event: Fortinet VPN Credentials and Configuration Data Exposed for 73,000 Devices - Bitsight
DoublePulsar
Press · 17 Jun 2026, 07:00 · FortiBleed — 75k Fortinet firewalls have admin passwords cracked | by Kevin Beaumont - DoublePulsar
Yahoo Finance
Press · 06 Jun 2026, 07:00 · Fortinet (FTNT): FortiGate G Series Expands with New 3500G and 400G Firewalls - Yahoo Finance
Rapid7
Press · 08 Apr 2026, 07:00 · Investigating FortiGate CVE-2025-59718 Exploitation: IR Tales from The Field - Rapid7
SentinelOne
Press · 10 Mar 2026, 07:00 · FortiGate Edge Intrusions | Stolen Service Accounts Lead to Rogue Workstations and Deep AD Compromise - SentinelOne
SecurityWeek
Press · 23 Feb 2026, 08:00 · Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS - SecurityWeek
Amazon Web Services (AWS)
Press · 20 Feb 2026, 08:00 · AI-augmented threat actor accesses FortiGate devices at scale | Amazon Web Services - Amazon Web Services (AWS)
Arctic Wolf
Press · 21 Jan 2026, 08:00 · Arctic Wolf Observes Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts - Arctic Wolf
Rapid7
Press · 06 Dec 2024, 08:00 · Metasploit Weekly Wrap-Up: 12/06/2024 - Rapid7
watchTowr Labs
Press · 14 Nov 2024, 08:00 · Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575 - watchTowr Labs
Arctic Wolf
Press · 24 Oct 2024, 07:00 · Recommendations For CVE-2024-47575: - Arctic Wolf
National Cyber Security Centre
Press · 24 Oct 2024, 07:00 · Exploitation of vulnerability affecting Fortinet FortiManager - National Cyber Security Centre
The Record from Recorded Future News
Press · 24 Oct 2024, 07:00 · High-severity FortiManager bug being exploited by hackers - The Record from Recorded Future News
The Hacker News
Press · 24 Oct 2024, 07:00 · Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation - The Hacker News
Google Cloud
Press · 24 Oct 2024, 07:00 · Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575) - Google Cloud
TechTarget
Press · 23 Oct 2024, 07:00 · Fortinet discloses critical zero-day flaw in FortiManager - TechTarget
BleepingComputer
Press · 23 Oct 2024, 07:00 · Fortinet warns of new critical FortiManager flaw used in zero-day attacks - BleepingComputer
Rapid7
Press · 23 Oct 2024, 07:00 · Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks - Rapid7

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 7.0 · reality 8.9 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

2

Public exploit entries / repo candidates

See 2 repos with metrics
RepositoryStarsForksLanguageUpdated
AnnnNix/CVE-2024-4757500Shell19 Jul 2025, 22:15
revanslbw/CVE-2024-47575-POC00—05 Jan 2025, 03:06
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.8; EPSS 94.8%
Attention, last 30 days
12 distinct story titles; 13 press documents; 2 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:18.907609+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Added to the CISA KEV catalog
23 Oct 2024, 00:00
First press mention
23 Oct 2024, 07:00
Published
23 Oct 2024, 15:03
Latest press mention
30 Oct 2026, 07:02
Score calculated
05 Nov 2026, 13:59
Name
FortiGate
PoCs on GitHub
2 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar