CVE-2024-55591Used in ransomware
Fortinet FortiOS and FortiProxy
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
What it is
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Fortinet entries on the list
- Multiple Products Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · Oct 16, 2026
- FortiMail Fortinet FortiMail Path Traversal Vulnerability CVE-2026-104286 · Oct 1, 2026
- Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2025-25249 · Sep 9, 2026
- FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2025-68686 · Jul 27, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 · Jul 16, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-25089 · Jul 16, 2026