Vulnerability intelligence

CVE-2024-21762

Fortinet FortiOS Out-of-Bound Write Vulnerability

Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.

CVSS Score

9.6

Critical

EPSS — Exploit Probability

—

Awaiting FIRST.org data

Exploitation

Confirmed in the wild

Used in ransomware campaigns

Remediation

unknown

Federal deadline 2024-02-16

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2024-02-16.

NVD entry PoC / advisory CISA KEV

1 article across 1 outlet · first covered Sep 15, 2026 · latest Sep 15, 2026

Coverage timeline

Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BB
www.securityweek.com · Sep 15, 2026

Related CVEs — Fortinet

CVE-2018-13379KEV CVE-2022-42475KEV CVE-2023-27997KEV CVE-2025-25249KEV CVE-2026-26084 CVE-2026-84393 CVE-2024-55591KEV CVE-2026-26035