Fortinet PSIRT Monthly Advisories — February 2024

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

• Critical 9.8
  CVE-2024-23113 Exploited Public exploit A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7…
  EPSS 62%

All vulnerabilities 5