FortiManager
No CISA KEV deadline is open. CISA last added a FortiManager CVE on 23 Oct 2024.
Tracked since 13 Aug · latest article Mon 19 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
6 articles from 5 outlets since 13 Aug; the latest 7 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 19 Oct · 11:36 UTC | SecurityWeek | Fortinet Flaw Exploits Led to Stealthy FortiGate Implant in Telecom Breach |
| Fri 16 Oct · 09:45 UTC | Security Affairs | Hackers Stole Fortinet Credentials from 500 Firewalls via FortiManager |
| Fri 16 Oct · 06:42 UTC | The Hacker News | Fortinet flaw lets stealthy PEERSTITCH malware hijack firewall processes |
| Thu 15 Oct · 04:01 UTC | SecurityOnline | Hackers Used FortiManager Flaws to Compromise 500 Firewalls |
| Wed 14 Oct · 22:18 UTC | Unit 42 | Hackers Stole Configurations for 500 FortiGate Firewalls in FortiManager Breach |
| Thu 13 Aug · 11:07 UTC | SecurityWeek | Fortinet patches CVE-2026-26035 auth bypass in FortiWeb |
Who reported 5 outlets, last 12 months
- SecurityWeek2
- Unit 421
- SecurityOnline1
- The Hacker News1
- Security Affairs1
- Fortinet Flaw Exploits Led to Stealthy FortiGate Implant in Telecom BreachSecurityWeek
- Hackers Stole Fortinet Credentials from 500 Firewalls via FortiManagerSecurity Affairs
- Fortinet flaw lets stealthy PEERSTITCH malware hijack firewall processesThe Hacker News
- Hackers Used FortiManager Flaws to Compromise 500 FirewallsSecurityOnline
- Hackers Stole Configurations for 500 FortiGate Firewalls in FortiManager BreachUnit 42
- Fortinet patches CVE-2026-26035 auth bypass in FortiWebSecurityWeek
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.