Zero-Day in Fortinet FortiManager Exploited In The Wild (CVE-2024-47575)

On October 22, security researcher Kevin Beaumont published a blog post about a zero-day vulnerability in Fortinet FortiManager. According to Beaumont, the flaw, which he named FortiJump, had been exploited in the wild, but added that the vendor had yet to share any information publicly nor assign a formal CVE identifier for it. On October 23, Fortinet published an advisory for the vulnerability, which is now identified as CVE-2024-47575, adding that it had been exploited in the wild.

For more information about FortiJump, including the availability of patches and Tenable product coverage, please visit our blog.