27575mp4

It was first observed as a zero-day exploit as early as June 2024, notably by a threat cluster tracked as UNC5820 . Exploitation Context

Missing authentication for a critical function in the fgfmsd daemon. Severity: Rated 9.8 (Critical) on the CVSS scale. 27575mp4

A remote, unauthenticated attacker could execute arbitrary code or commands by sending specially crafted requests to an exposed FortiManager device. It was first observed as a zero-day exploit