Vulnerability intelligence
CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability
Fortinet FortiManager
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
KEV since 2024-10-23
Remediation
unknown
Federal deadline 2024-11-13
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2024-11-13.
1 article across 1 outlet · first covered Oct 14, 2026 · latest Oct 14, 2026
Coverage timeline
-
Hackers Stole Configurations for 500 FortiGate Firewalls in FortiManager Breachunit42.paloaltonetworks.com · Oct 14, 2026