CVE-2024-55591—Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Vulnerability Name

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Description

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://fortiguard.fortinet.com/psirt/FG-IR-24-535
• https://nvd.nist.gov/vuln/detail/CVE-2024-55591

Related News Articles

• The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a WormJune 11, 2026
• Nissan confirms design studio data breach claimed by Qilin ransomwareAugust 26, 2025
• The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025August 5, 2025
• Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 AttacksJune 11, 2025
• Critical Fortinet flaws now exploited in Qilin ransomware attacksJune 6, 2025

Related Weaknesses

• CWE-288