CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.
 Fortinet FortiOS and FortiProxy Mar 18, 2025 Apr 8, 2025 Ransomware
CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
 Fortinet FortiOS and FortiProxy Jan 14, 2025 Jan 21, 2025 Ransomware
CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.
 Fortinet FortiOS and FortiProxy Jan 10, 2022 Jul 10, 2022 Ransomware
CVE-2018-13383 — Fortinet FortiOS and FortiProxy Out-of-bounds Write
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.
 Fortinet FortiOS and FortiProxy Jan 10, 2022 Jul 10, 2022 Ransomware