Fortinet Patches Critical Flaw in FortiOS SSL VPN (CVE-2024-21762)

On February 8, Fortinet published a security advisory (FG-IR-24-015) to address a critical flaw in FortiOS:

• CVE-2024-21762

The vulnerability exists in the SSL VPN daemon (sslvpnd) in FortiOS and, according to Fortinet, has been “potentially exploited in the wild” though no specific information was shared as of February 9 about this potential in-the-wild exploitation.

For more information about this vulnerability along with several others that were patched on February 8, including the availability of patches and Tenable product coverage, please visit our blog.