{"metadata": {"vulnerability": "CVE-2024-47575", "count": 172, "kinds": {"milestone": 10, "sighting": 119, "kev": 11, "other": 32}}, "data": [{"timestamp": "2024-09-27T16:19:24.137Z", "date_only": false, "value": "2024-09-27T16:19:24.137Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-47575", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "timestamps.asserted_at", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-47575", "field": "timestamps.asserted_at", "uuid": "0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": true, "value": "2024-10-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-47575", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-47575", "field": "evidence.0.details.added_date", "uuid": "0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": true, "value": "2024-10-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "evidence.0.details.date_added", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "timestamps.first_seen_at", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-47575", "field": "timestamps.first_seen_at", "uuid": "0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": true, "value": "2024-10-23", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": true, "value": "2024-10-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0917", "record": "CERTFR-2024-AVI-0917", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.6.revision_date"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0917", "record": "CERTFR-2024-AVI-0917", "field": "revisions.0.revision_date"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "status.status_updated_at", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-47575", "field": "status.status_updated_at", "uuid": "0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-47575", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-10-23T15:03:48.798Z", "date_only": false, "value": "2024-10-23T15:03:48.798Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-47575", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-23T15:15:30Z", "date_only": false, "value": "2024-10-23T15:15:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HX4Q-76P6-78CC", "record": "GHSA-HX4Q-76P6-78CC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-23T15:15:30.707Z", "date_only": false, "value": "2024-10-23T15:15:30.707", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47575", "record": "FKIE_CVE-2024-47575", "field": "published"}, {"timestamp": "2024-10-23T15:31:08Z", "date_only": false, "value": "2024-10-23T15:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HX4Q-76P6-78CC", "record": "GHSA-HX4Q-76P6-78CC", "field": "published"}, {"timestamp": "2024-10-23T16:01:18Z", "date_only": false, "value": "2024-10-23T16:01:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/20896", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "90341045-f220-4bfd-8227-d03783902d39", "content": "\u200aFortinet warns of new critical FortiManager flaw used in zero-day attacks\n\nFortinet publicly disclosed today a critical\u00a0FortiManager API vulnerability, tracked as CVE-2024-47575,\u00a0that was exploited in zero-day attacks to steal sensitive files containing configurations, IP addresses, and credentials for managed devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-critical-fortimanager-flaw-used-in-zero-day-attacks/", "url": "https://t.me/BleepingComputer/20896"}, {"timestamp": "2024-10-23T16:28:14Z", "date_only": false, "value": "2024-10-23T16:28:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_25/2024", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "5c5d880e-1daa-4ded-940d-e01986abf253", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_25/2024"}, {"timestamp": "2024-10-23T16:51:38.477Z", "date_only": false, "value": "2024-10-23T16:51:38.477778Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-23T16:51:38.477Z", "date_only": false, "value": "2024-10-23T16:51:38.477778Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-23T18:10:02Z", "date_only": false, "value": "2024-10-23T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "0e222aa2-5571-45e3-8f91-0ce73ee4299a"}, {"timestamp": "2024-10-23T18:13:38Z", "date_only": false, "value": "2024-10-23T18:13:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8703", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "8872dc6e-4626-4163-bed2-36834a7e6810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47575 - Fortinet FortiManager Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47575 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8703"}, {"timestamp": "2024-10-23T18:46:56.295Z", "date_only": false, "value": "2024-10-23T18:46:56.295704Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-23T22:00:00Z", "date_only": false, "value": "2024-10-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.3.revision_date"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0917", "record": "CERTFR-2024-AVI-0917", "field": "revisions.1.revision_date"}, {"timestamp": "2024-10-24T04:00:00Z", "date_only": false, "value": "2024-10-24T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1405", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d5cee55f-ced0-4aff-959e-70573ec0a38c", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1405"}, {"timestamp": "2024-10-24T07:11:27Z", "date_only": false, "value": "2024-10-24T07:11:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2024/10/kritische-zero-day-schwachstelle-in-fortimanager-wird-aktiv-ausgenutzt-update-verfugbar", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "144db571-2c77-4ed8-b674-fa3ac38bda3f", "url": "https://www.cert.at/de/warnungen/2024/10/kritische-zero-day-schwachstelle-in-fortimanager-wird-aktiv-ausgenutzt-update-verfugbar"}, {"timestamp": "2024-10-24T07:23:35.722Z", "date_only": false, "value": "2024-10-24T07:23:35.722806Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2c6a09d6-288d-4fdf-a567-1e471bd93d7f"}, {"timestamp": "2024-10-24T07:23:56.253Z", "date_only": false, "value": "2024-10-24T07:23:56.253649Z", "kind": "sighting", "label": "Exploited", "source": "Source not specified", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "997b0434-1cf7-4804-b2dd-06c05af90785"}, {"timestamp": "2024-10-24T07:24:00.179Z", "date_only": false, "value": "2024-10-24T07:24:00.179030Z", "kind": "sighting", "label": "Confirmed", "source": "Source not specified", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "a48b28db-d4c7-4772-8516-5ae7e3424e43"}, {"timestamp": "2024-10-24T07:26:42Z", "date_only": false, "value": "2024-10-24T07:26:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4fe85264-fb26-494e-8eb7-da101e19e291", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e519edaa-e202-47e1-a658-bb30503d8c90"}, {"timestamp": "2024-10-24T07:27:38Z", "date_only": false, "value": "2024-10-24T07:27:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0423", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d2a3c7a4-ac23-4dbc-b39b-b7d697168895", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0423"}, {"timestamp": "2024-10-24T07:27:38.760Z", "date_only": false, "value": "2024-10-24T07:27:38.760996Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-10-24T08:01:14.819Z", "date_only": false, "value": "2024-10-24T08:01:14.819+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3260", "record": "WID-SEC-W-2024-3260", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-24T08:04:32.724Z", "date_only": false, "value": "2024-10-24T08:04:32.724240Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/55eb3309-c5c3-4f89-bdbd-e3ffa97ab779", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "35e92a9c-5491-4730-a9c5-5a11ad49dc97", "url": "https://vulnerability.circl.lu/comment/55eb3309-c5c3-4f89-bdbd-e3ffa97ab779"}, {"timestamp": "2024-10-24T08:10:35.492Z", "date_only": false, "value": "2024-10-24T08:10:35.492175Z", "kind": "sighting", "label": "Exploited", "source": "Source not specified", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "0ffa099a-f377-4bd8-98cf-64ba607aaca5"}, {"timestamp": "2024-10-24T08:28:42Z", "date_only": false, "value": "2024-10-24T08:28:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5779", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "04244c3a-5466-49b0-815f-c96ecdaafd9b", "content": "\ud83d\udea8 Fortinet confirms a critical vulnerability (CVE-2024-47575 / CVSS 9.8) affecting FortiManager is being actively exploited! \n \nIt could allow unauthorized remote access, potentially compromising sensitive data & configurations. \n \nhttps://thehackernews.com/2024/10/fortinet-warns-of-critical.html \n \nDon't wait\u2014patch now.", "url": "https://t.me/thehackernews/5779"}, {"timestamp": "2024-10-24T08:36:52Z", "date_only": false, "value": "2024-10-24T08:36:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0b67d8ae-d352-4594-ba0a-ecb93693fa91", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "58a69f13-2c3f-4248-84f8-7ad5e6024bf1"}, {"timestamp": "2024-10-24T12:19:57Z", "date_only": false, "value": "2024-10-24T12:19:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Pms_nek1HbiWX4t-ihC0qitpo32DRGKXQWKdfa9tZOEt9w", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "61b9d8f2-ab55-40df-8ec3-ffc8b1148b89"}, {"timestamp": "2024-10-24T12:58:13Z", "date_only": false, "value": "2024-10-24T12:58:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/QnBU3JoZDhQZ6GLnBrg4qmP8J5cNU_6rnWFgx3NPObdpRw", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "deafc5d9-b7b5-478c-9e88-164f3dba9370"}, {"timestamp": "2024-10-24T14:06:14Z", "date_only": false, "value": "2024-10-24T14:06:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/225530", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "03b5bef2-7764-4e45-beaf-b9e939141516", "content": "FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024\nhttps://ift.tt/CUA1ItT", "url": "https://t.me/ctinow/225530"}, {"timestamp": "2024-10-24T16:00:07Z", "date_only": false, "value": "2024-10-24T16:00:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6357", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "fcb35c76-cf78-4811-9cb1-493e92cccea9", "content": "Fortinet \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0441 CVSS 9,8/10 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 FortiManager.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-47575\u00a0\u0438 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c Fortinet API FGFM.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Fortinet, \u043e\u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiGate \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 FortiManager \u0438 FortiGate \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 FortiManager.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 API \u043d\u0430 FortiManager.\n\nMandiant \u0432\u00a0\u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e CVE-2024-47575 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043a\u0430\u043a UNC5820, \u0441 27 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 FortiManager, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nFortinet \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 FortiManager, \u043a\u0430\u043a \u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b UNC5820 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 FortiManager, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, Mandiant \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0446\u0435\u043b\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0432\u043e \u0432\u0441\u0435\u0445 \u043b\u0438\u043d\u0435\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 7.0, 7.2, 7.4 \u0438 7.6 FortiManager.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 IOC \u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u00ab\u0431\u0435\u043b\u044b\u0445\u00bb \u0441\u043f\u0438\u0441\u043a\u043e\u0432 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.\n\n\u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0434\u0430\u0442\u044b \u0432\u0437\u043b\u043e\u043c\u0430.", "url": "https://t.me/true_secator/6357"}, {"timestamp": "2024-10-24T16:09:06Z", "date_only": false, "value": "2024-10-24T16:09:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2762", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "826fe46e-3fe3-46a8-ba40-c9c72cdd5d43", "content": "Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation\nhttps://thehackernews.com/2024/10/fortinet-warns-of-critical.html\n\nFortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild.\nTracked as CVE-2024-47575 (CVSS score: 9.8), the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager (FGFM) protocol.\n\"A missing authentication for critical function vulnerability [CWE-306] in FortiManager fgfmd daemon may", "url": "https://t.me/KomunitiSiber/2762"}, {"timestamp": "2024-10-24T17:03:42Z", "date_only": false, "value": "2024-10-24T17:03:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/80556", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "4db43fef-5616-433f-aa97-b0f625afca4b", "content": "\ud83e\udd85 CISA Flags Critical Vulnerability (CVE-2024-47575) in Fortinet\u2019s FortiManager \ud83e\udd85\n\n  Overview\u00a0   The Cybersecurity and Infrastructure Security Agency CISA has added Fortinets FortiManager to its known Exploited Vulnerabilities KEV catalog, indicating a pressing need for organizations to address the associated risks.\u00a0   The critical vulnerability identified as CVE202447575 has been assigned a CVSS score of 9.8. This vulnerability affects various versions of FortiManager, including FortiManager 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, and 6.2.0 through 6.2.12, as well as multiple iterations of FortiManager Cloud.\u00a0\u00a0   The vulnerability stems from a missing authentication issue within the critical functions of the FortiManager fgfmd daemon, allowing remote, unauthenticated attackers to execute arbitrary commands or code ...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/80556"}, {"timestamp": "2024-10-24T20:29:20Z", "date_only": false, "value": "2024-10-24T20:29:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cybersecs/3089", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "00557102-7b85-4e21-a729-e530fdd60323", "content": "You already know about CVE-2024-47575, right? RIGHT?\n\n[ FortiManager Zero-Day (CVE-2024-47575) ]\n\nFortiManager fgfmd daemon may allow a remote unauthenticated attacker to  execute arbitrary code or commands via specially crafted requests (critical) / aka FortiJump.\n\nFrom Vendor: https://www.fortiguard.com/psirt/FG-IR-24-423\n\nFrom Mandiant: https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575", "url": "https://t.me/cybersecs/3089"}, {"timestamp": "2024-10-24T20:36:36Z", "date_only": false, "value": "2024-10-24T20:36:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityIL/59763", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "a63dcde7-c8fe-4564-a6c2-8a17f0f1edba", "content": "\u05d7\u05d5\u05dc\u05e9\u05d4 Zero Day \u05d7\u05d3\u05e9\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 \u05e9\u05dc Fortinet \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05de\u05d6\u05d4 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05d3\u05e9\u05d9\u05dd \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 - CVE-2024-47575 \u05d4\u05de\u05db\u05d5\u05e0\u05d4 FortiJump, \u05e7\u05d9\u05d9\u05de\u05ea \u05d1\u05e8\u05db\u05d9\u05d1 Fortinet Forti Manager \u05d5\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05de\u05d0\u05d6 \u05d9\u05d5\u05e0\u05d9 \u05d4\u05e9\u05e0\u05d4.\n\n\u05d7\u05d1\u05e8\u05ea Mandiant \u05d3\u05d9\u05d5\u05d5\u05d7\u05d4 \u05d1\u05d4\u05e8\u05d7\u05d1\u05d4 \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05e9\u05d1\u05de\u05e7\u05d1\u05d9\u05dc \u05d2\u05dd \u05d7\u05d1\u05e8\u05ea Fortinet \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d4\u05d5\u05d3\u05e2\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0.\n\nhttps://t.me/CyberSecurityIL/5935\n\n#\u05d7\u05d5\u05dc\u05e9\u05d4", "url": "https://t.me/CyberSecurityIL/59763"}, {"timestamp": "2024-10-25T05:35:07Z", "date_only": false, "value": "2024-10-25T05:35:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Dragon_Sec/6208", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "068aa656-2d16-4ea9-8163-487c409a2c92", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "url": "https://t.me/Dragon_Sec/6208"}, {"timestamp": "2024-10-25T05:35:07Z", "date_only": false, "value": "2024-10-25T05:35:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Dragon_Sec/782", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "5ea0a87b-e8fb-4177-997c-4129c3d52b26", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "url": "https://t.me/Dragon_Sec/782"}, {"timestamp": "2024-10-25T05:35:07Z", "date_only": false, "value": "2024-10-25T05:35:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6E-aYcv70W0POUuZKvSJt8L2VrNvGeahBHOm1I5Q1gCmYg", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "8a909fb2-d2b7-4e95-b620-a2af3ef85953"}, {"timestamp": "2024-10-25T05:38:16Z", "date_only": false, "value": "2024-10-25T05:38:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/8vscstuB9t2zhKiGPLgRBoM0TyZl5YOM20NvbJThOJYPw9c", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "9f4434af-64be-49e7-944a-f5419decb0a4"}, {"timestamp": "2024-10-25T06:18:33Z", "date_only": false, "value": "2024-10-25T06:18:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ViralCyber/7301", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "eaca5a7d-07be-4820-87db-38478db4d1b1", "content": "\ud83d\udd34\u0627\u062c\u0631\u0627\u06cc Exploit \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631 Fortinet\n\u25c0\ufe0f\u0627\u062e\u06cc\u0631\u0627 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zeroday \u062f\u0631 Fortinet \u0628\u0647 \u0646\u0627\u0645 FortiJump \u0648 \u0628\u0627 \u0634\u0645\u0627\u0631\u0647 CVE-2024-47575 \u06a9\u0634\u0641 \u0648 Patch \u0634\u062f\u0647 \u0627\u0633\u062a. \u062d\u0627\u0644\u0627 \u0645\u0634\u062e\u0635 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0645\u0627\u0647\u200c\u0647\u0627 \u0642\u0628\u0644 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 Patch\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n \u25c0\ufe0f\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0631 \u0631\u0648\u06cc FortiManager \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f \u0648 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Fortinet \u062a\u062d\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f. \u0628\u0631 \u0627\u0633\u0627\u0633 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a Mandiant\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0698\u0648\u0626\u0646 2024 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0634\u062f\u0647 \u0648 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631  \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0631 \u0635\u0646\u0627\u06cc\u0639 \u0645\u062e\u062a\u0644\u0641 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. Fortinet \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\u25c0\ufe0f\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "url": "https://t.me/ViralCyber/7301"}, {"timestamp": "2024-10-25T07:11:40.672Z", "date_only": false, "value": "2024-10-25T07:11:40.672278Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/9baa9351-dc32-4f7d-b01d-eeb3a51e50be", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "03d3013b-c2e2-46b2-915e-783abacc2def", "url": "https://vulnerability.circl.lu/comment/9baa9351-dc32-4f7d-b01d-eeb3a51e50be"}, {"timestamp": "2024-10-25T07:18:54.820Z", "date_only": false, "value": "2024-10-25T07:18:54.820316Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/e147bc02-1352-4685-8d0a-692e2fe98072", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "df043938-729f-4829-a970-fb96f260f779", "url": "https://vulnerability.circl.lu/comment/e147bc02-1352-4685-8d0a-692e2fe98072"}, {"timestamp": "2024-10-25T16:57:45Z", "date_only": false, "value": "2024-10-25T16:57:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/20901", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d87c4361-5131-4eb9-a535-8312eef7b109", "content": "\u200aMandiant says new Fortinet flaw has been exploited since June\n\nA new Fortinet FortiManager flaw dubbed \"FortiJump\" and tracked as CVE-2024-47575 has been exploited since June 2024 in zero-day attacks on over 50 servers, according to a new report by Mandiant. [...]\n\nhttps://www.bleepingcomputer.com/news/security/mandiant-says-new-fortinet-fortimanager-flaw-has-been-exploited-since-june/", "url": "https://t.me/BleepingComputer/20901"}, {"timestamp": "2024-10-25T18:03:03Z", "date_only": false, "value": "2024-10-25T18:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/eaglecyberwashere/55280", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e73a5253-9cd4-4466-864f-ab004c4859b8", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "url": "https://t.me/eaglecyberwashere/55280"}, {"timestamp": "2024-10-25T18:03:03Z", "date_only": false, "value": "2024-10-25T18:03:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/eaglecyberwashere/3337", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "3d69d117-b8c4-4e1b-801f-37b4b3659a1b", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "url": "https://t.me/eaglecyberwashere/3337"}, {"timestamp": "2024-10-25T18:03:03Z", "date_only": false, "value": "2024-10-25T18:03:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/24574", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "ca808ffc-0ce6-4ba2-896a-3313281f40c1", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "url": "https://t.me/tengkorakcybercrewz/24574"}, {"timestamp": "2024-10-25T18:03:03Z", "date_only": false, "value": "2024-10-25T18:03:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/5421", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "38f5e971-a146-4f12-ac7b-18e026086e35", "content": "UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575) \u2013 hackread.com\n\nFri, 25 Oct 2024 20:03:48", "url": "https://t.me/tengkorakcybercrewz/5421"}, {"timestamp": "2024-10-25T18:32:16.885Z", "date_only": false, "value": "2024-10-25T18:32:16.885929Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-47575", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-25T18:32:16.885Z", "date_only": false, "value": "2024-10-25T18:32:16.885929Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47575", "record": "FKIE_CVE-2024-47575", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-26T05:44:54Z", "date_only": false, "value": "2024-10-26T05:44:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/23522", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d4a215f6-5d12-4a0f-8fc8-4a253f4754a5", "content": "Fortinet \u043e\u0431\u0432\u0438\u043d\u044f\u044e\u0442 \u0432 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c RCE-\u0431\u0430\u0433\u0435 \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \ud83d\udd0d\n\n\u041a\u0430\u043a \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0418\u0411-\u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u041a\u0435\u0432\u0438\u043d \u0411\u043e\u043c\u043e\u043d\u0442, \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 13 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 FortiManager \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FortiManager \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043b\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u043c\u0438 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u044f\u0432\u0438\u043b, \u0447\u0442\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u043c \u0438\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c, \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u00ab\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435\u00bb \u0445\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2024 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430 Reddit \u0442\u0430\u043a \u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u043e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u00ab\u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 Fortigate \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e Fortigate, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 FortiManager \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u00bb.\n\n\u0422\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Fortinet \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 FortiJump, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-47575 (9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 FortiManager \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 13 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0438, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b FortiManager \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a FortiGate \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u0417\u0430\u0442\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mandiant \u0443\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e, \u043f\u043e \u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 FortiJump \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0445\u0430\u043a-\u0433\u0440\u0443\u043f\u043f\u044b UNC5820 \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0438 \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/23522"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": true, "value": "2024-10-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-00408", "record": "CNVD-2025-00408", "field": "submitTime"}, {"timestamp": "2024-10-28T00:00:27Z", "date_only": false, "value": "2024-10-28T00:00:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/13802", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "a1f7e8f5-d440-46b8-a7ab-af103c39cc49", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 FortiManager Devices Mass Compromise Exploiting CVE-2024-47575 Vulnerability.\n\nhttps://cybersecuritynews.com/fortimanager-devices-mass-compromise/", "url": "https://t.me/cKure/13802"}, {"timestamp": "2024-10-28T00:05:25Z", "date_only": false, "value": "2024-10-28T00:05:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/13803", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "933940d2-d7b8-4f6d-90a5-4db6d4c7a308", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Mandiant tracking wild exploitation of CVE-2024-47575 (FortiManager) wild exploitation due to missing authentication on 'fgfmd' daemon ( dubbed FortiJump).\n\nhttps://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575", "url": "https://t.me/cKure/13803"}, {"timestamp": "2024-10-28T12:05:13Z", "date_only": false, "value": "2024-10-28T12:05:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1476", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d2bde032-7b9d-46ec-8e2a-685d7a4fb627", "content": "\ud83c\udf83 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83c\udfea\u041d\u0435\u0434\u0435\u043b\u044f \u0431\u044b\u043b\u0430 \u0431\u043e\u0433\u0430\u0442\u0430 \u043d\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043e Lazarus. \u042d\u0442\u043e\u0442 APT-\u0430\u043a\u0442\u043e\u0440, \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043b\u044e\u0431\u044f\u0449\u0438\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443:\n\ud83c\udd97 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0443\u044e MOBA-\u0438\u0433\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0438\u043d\u0432\u0435\u0441\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0435\u0451 \u0441\u0430\u0439\u0442 \u0438 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0412\u041f\u041e, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 Chrome. \u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0438\u0433\u0440\u044b \u0432\u0435\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u0430 \u0432 \u0441\u043e\u0446\u043c\u0435\u0434\u0438\u0430;\n\ud83c\udd97 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 npm-\u043f\u0430\u043a\u0435\u0442 NFT_marketplace, \u0437\u0430\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c BeaverTail;\n\ud83c\udd97 \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \"\u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\" \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0412\u041f\u041e \u043d\u0430 Python.\n\n\u2757\ufe0f \u041e\u0431\u0437\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432: Kral, Amos, Vidar.\n\n\u2757\ufe0f \u0426\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0430\u0440\u043c\u044f\u043d\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0436\u0435\u0440\u0442\u0432 \u043f\u043e\u0431\u0443\u0436\u0434\u0430\u044e\u0442 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 PowerShell \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0449\u0438\u0439 PDQ RMM. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u044e\u0442 \u0430\u0442\u0430\u043a\u0443 APT MuddyWater.\n\n\u2757\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 \u0441\u0432\u0435\u0436\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0430\u043d\u043a\u0435\u0440\u0430 Grandoreiro, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0440\u0430\u0436\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 1700 \u0431\u0430\u043d\u043a\u043e\u0432 \u0432 45 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u043e Windows \u0412\u041f\u041e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0432\u0435\u0442\u0430\u0442\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u043e\u0441\u0442 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0430\u043d\u043a\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0441\u0451\u043c \u043c\u0438\u0440\u0435.\n\n\u2757\ufe0f\u041d\u043e\u0432\u044b\u0435 \u0434\u0435\u044f\u0442\u0435\u043b\u0438 \u043d\u0430 \u0430\u0440\u0435\u043d\u0435 ransomware: Embargo. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0412\u041f\u041e \u043d\u0430 Rust \u0438 \u0433\u043b\u0443\u0448\u0430\u0442 EDR \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 MS4Killer.\n\n\u2757\ufe0f\u0410 \u0430\u0432\u0442\u043e\u0440\u044b Akira ransomware \u0440\u0430\u0437\u043e\u0447\u0430\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 v2 \u043d\u0430 Rust  \u0438 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u043a \u0441\u0442\u0430\u0440\u043e\u0439 \u0441\u0445\u0435\u043c\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 C++.\n\n\u2757\ufe0f\u041d\u043e\u0432\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u0445\u043e\u0434\u0430 \u043e\u0442 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 Quilin/Agenda RaaS. \n\n\u2757\ufe0f\u0421\u0435\u0440\u0432\u0435\u0440\u044b Docker \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0431\u043e\u0442\u043e\u043c SRBminer. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b gRPC \u043f\u043e\u0432\u0435\u0440\u0445 h2c (HTTP/2 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f).\n\n\u041d\u0435\u0434\u0435\u043b\u044f \u043f\u0440\u043e\u0448\u043b\u0430 \u0431\u043e\u0434\u0440\u043e \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\ud83c\udd97 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c Cisco \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 36 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 ASA & FTD, CVE-2024-20481, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 RAVPN.\n\n\ud83c\udd97 Fortinet \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2024-47575, RCE \u0432 FortiManager, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e. \u0413\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0441\u0445\u0435\u043c\u0430 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u043e\u0432\u0430: \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 MSP, \u0430 \u0437\u0430\u0442\u0435\u043c \u2014 \u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u2757\ufe0f\u041d\u0435 \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u0442\u043e\u0436\u0435 \u0431\u043e\u0434\u0440\u043e \u2014  CVE-2024-38094 \u0432 SharePoint server \u0431\u044b\u0441\u0442\u0440\u043e \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c PoC, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0451 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1476"}, {"timestamp": "2024-10-28T17:38:16Z", "date_only": false, "value": "2024-10-28T17:38:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8868", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "34611cb2-923e-4221-b8fc-b3f8c918b62a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: Critical Remote Code Execution (RCE) Vulnerability in VMware Horizon\nURL\uff1ahttps://github.com/groshi/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8868"}, {"timestamp": "2024-10-29T13:12:35Z", "date_only": false, "value": "2024-10-29T13:12:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/654", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d9cd20e8-b81b-4f49-bc94-72a887c2e96c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: Critical Remote Code Execution (RCE) Vulnerability in VMware Horizon\nURL\uff1ahttps://github.com/groshi/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/HackerArsenal/654"}, {"timestamp": "2024-10-29T15:51:10Z", "date_only": false, "value": "2024-10-29T15:51:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8882", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "b72f740f-6a6c-4b8f-962a-512bfc4d1191", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575 POC\nURL\uff1ahttps://github.com/zgimszhd61/CVE-2024-47575-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8882"}, {"timestamp": "2024-10-30T00:00:00Z", "date_only": false, "value": "2024-10-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "initial_release_date"}, {"timestamp": "2024-10-30T00:00:00Z", "date_only": false, "value": "2024-10-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.0.revision_date"}, {"timestamp": "2024-11-01T13:10:19Z", "date_only": false, "value": "2024-11-01T13:10:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8916", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "40ab8f65-825f-473c-a0ec-c2ddf9195b67", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/Fruktolzzz/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8916"}, {"timestamp": "2024-11-02T16:56:31Z", "date_only": false, "value": "2024-11-02T16:56:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Celestial_Pulse24/11374", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2115a1a1-d353-4392-96ff-040c14b40d74", "content": "\u200aNew Threat Group UNC5820 Targets FortiManager Zero-Day CVE-2024-47575 in Global Cyberattack\n\nhttps://securityonline.info/new-threat-group-unc5820-targets-fortimanager-zero-day-cve-2024-47575-in-global-cyberattack/", "url": "https://t.me/Celestial_Pulse24/11374"}, {"timestamp": "2024-11-02T18:53:35Z", "date_only": false, "value": "2024-11-02T18:53:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8931", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "187b9f3d-69d9-4bbf-a12f-b8c948650730", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/groshi324/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8931"}, {"timestamp": "2024-11-02T19:10:12Z", "date_only": false, "value": "2024-11-02T19:10:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8933", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "c6e5c00a-7ec4-4f9e-8c23-7fa47a58053a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/VIRKiss/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8933"}, {"timestamp": "2024-11-02T19:22:42Z", "date_only": false, "value": "2024-11-02T19:22:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8935", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "6578d1a0-e1f8-455a-ae24-701f27af1de9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/LayNMR/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8935"}, {"timestamp": "2024-11-02T19:31:04Z", "date_only": false, "value": "2024-11-02T19:31:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8936", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "ff60905c-80eb-4722-8701-d6c5cca32611", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a CVE-2024-47575: FortiManager Missing Authentication\nURL\uff1ahttps://github.com/DaresNone/CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8936"}, {"timestamp": "2024-11-05T13:43:12.294Z", "date_only": false, "value": "2024-11-05T13:43:12.294048Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/fc8919b9-2200-4953-9752-83a8d586e76e", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d8c8b5dd-de2f-4554-9b87-99109e45b476", "url": "https://vulnerability.circl.lu/comment/fc8919b9-2200-4953-9752-83a8d586e76e"}, {"timestamp": "2024-11-05T13:45:11.591Z", "date_only": false, "value": "2024-11-05T13:45:11.591938Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "83aa9361-f4af-48d1-a2fc-32ce0d31330a"}, {"timestamp": "2024-11-07T07:41:45.283Z", "date_only": false, "value": "2024-11-07T07:41:45.283Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2024-47575", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-08T06:42:59.075Z", "date_only": false, "value": "2024-11-08T06:42:59.075572Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113445973376795331", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "08efbbad-3725-4c2c-bab0-6d3ad0ce5c7e", "url": "https://infosec.exchange/users/patchnow24x7/statuses/113445973376795331"}, {"timestamp": "2024-11-11T02:57:27Z", "date_only": false, "value": "2024-11-11T02:57:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/club31337/2849", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d7f93cee-ef5d-4ea8-9ec6-ecc0c4a6b30a", "content": "https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575\n\n@club1337", "url": "https://t.me/club31337/2849"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": true, "value": "2024-11-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "evidence.0.details.due_date", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-13T21:00:32.697Z", "date_only": false, "value": "2024-11-13T21:00:32.697723Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/catc0n/statuses/113477656881433124", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "87460230-30e8-4544-a495-ac8d246b21c3", "url": "https://infosec.exchange/users/catc0n/statuses/113477656881433124"}, {"timestamp": "2024-11-13T23:51:35Z", "date_only": false, "value": "2024-11-13T23:51:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/club31337/2939", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "ca672f23-cd14-4da7-95ff-d70610d837e2", "content": "https://attackerkb.com/topics/OFBGprmpIE/cve-2024-47575/rapid7-analysis\n\nhttps://www.rapid7.com/blog/post/2024/10/23/etr-fortinet-fortimanager-cve-2024-47575-exploited-in-zero-day-attacks/\n\n@club31337", "url": "https://t.me/club31337/2939"}, {"timestamp": "2024-11-14T00:42:23.918Z", "date_only": false, "value": "2024-11-14T00:42:23.918020Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/113478529352841373", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "2007c17e-fda5-4b61-b9ab-9e4ded20d131", "url": "https://infosec.exchange/users/alexandreborges/statuses/113478529352841373"}, {"timestamp": "2024-11-14T08:13:33.806Z", "date_only": false, "value": "2024-11-14T08:13:33.806989Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/9579afd1-e7a6-4754-8574-5acaed28e11d", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "fcb68d28-6bc4-4411-b25f-58cfb20c8010", "url": "https://vulnerability.circl.lu/comment/9579afd1-e7a6-4754-8574-5acaed28e11d"}, {"timestamp": "2024-11-14T16:12:27Z", "date_only": false, "value": "2024-11-14T16:12:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/9033", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "3965318c-37ee-4123-83f3-989b08c943eb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\nURL\uff1ahttps://github.com/kac89/CVE-2024-7124\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9033"}, {"timestamp": "2024-11-14T16:25:30Z", "date_only": false, "value": "2024-11-14T16:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9034", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "169bd8e9-59ef-4970-8220-b358fd382ccb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\nURL\uff1ahttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9034"}, {"timestamp": "2024-11-14T16:47:13.266Z", "date_only": false, "value": "2024-11-14T16:47:13.266164Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113482323234195101", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d830353f-80b9-421d-9d1f-fae18e216fe4", "url": "https://infosec.exchange/users/screaminggoat/statuses/113482323234195101"}, {"timestamp": "2024-11-14T19:59:28Z", "date_only": false, "value": "2024-11-14T19:59:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Es_Pey5_2fMp3ynmZK51TgimDa6ZnHLvfTHJHRYaFCR1gd4", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "04ca752b-341d-4d8b-bc76-8629cc2a182a"}, {"timestamp": "2024-11-14T22:30:43.940Z", "date_only": false, "value": "2024-11-14T22:30:43.940861Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113483673211675864", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "0529ef61-215b-4f91-9da0-05f763f162f1", "url": "https://cyberplace.social/users/GossiTheDog/statuses/113483673211675864"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.4.revision_date"}, {"timestamp": "2024-11-15T03:55:46Z", "date_only": false, "value": "2024-11-15T03:55:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/10156", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "4aac8cbb-ec7e-475d-b9de-6d733e643361", "content": "Fortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\n\nPOC for CVSS 9.8 vulnerability in FortiManager, their tool for central management of FortiGate appliances.\n\nBlog: https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n#1N73LL1G3NC3 #fortinet\n\n@freedomf0x", "url": "https://t.me/lcmysecteamch/10156"}, {"timestamp": "2024-11-15T03:55:46Z", "date_only": false, "value": "2024-11-15T03:55:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/10473", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "bad6e1b2-237f-4536-88f6-bfc14cec2c2b", "content": "Fortimanager Unauthenticated Remote Code Execution AKA fortijump CVE-2024-47575\n\nPOC for CVSS 9.8 vulnerability in FortiManager, their tool for central management of FortiGate appliances.\n\nBlog: https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n#1N73LL1G3NC3 #fortinet\n\n@freedomf0x", "url": "https://t.me/lcmysecteamch/10473"}, {"timestamp": "2024-11-15T07:09:37Z", "date_only": false, "value": "2024-11-15T07:09:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1552", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "f928cb07-4ec2-47b6-8266-f47939e3f282", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/RalfHackerChannel/1552"}, {"timestamp": "2024-11-15T08:45:15Z", "date_only": false, "value": "2024-11-15T08:45:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9327", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "c3141fa7-ea7a-4565-b36b-d62b6ebb0f02", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575\n\nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "url": "https://t.me/thebugbountyhunter/9327"}, {"timestamp": "2024-11-15T10:52:37.440Z", "date_only": false, "value": "2024-11-15T10:52:37.440334Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-11-15T10:52:37.440Z", "date_only": false, "value": "2024-11-15T10:52:37.440334Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0423", "record": "NCSC-2024-0423", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-15T15:06:06Z", "date_only": false, "value": "2024-11-15T15:06:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerInvestigationZone/32", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "a01f449a-9676-46d6-902f-758ae23228de", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol circumventing authentication Referred to as FortiJump this vulnerability provides unauthorized access to FortiManager enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes\n\u2699\ufe0f Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\nResearch: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\nSource: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#Investigation_of_hacking", "url": "https://t.me/HackerInvestigationZone/32"}, {"timestamp": "2024-11-15T19:54:45Z", "date_only": false, "value": "2024-11-15T19:54:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2377", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e135182c-455a-4b2b-bdce-da335117e67e", "content": "CVE-2024-47575 FortiManager\n*\n\u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u0443\u0448\u0435\u043b push, \u0434\u0430 \u0435\u0449\u0435 \u0438 \u0437\u0430\u0430\u043f\u0440\u0443\u0432\u0438\u043b\u0438 \u0432 metasploit-framework\n\u041d\u043e \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u043c\u043e\u0434\u0443\u043b\u044c \u0435\u0441\u0442\u044c, \u0436\u043c\u0438 msfupdate ))\n*\nPull Req\n\n#fortinet #metasploit", "url": "https://t.me/proxy_bar/2377"}, {"timestamp": "2024-11-16T11:56:29.729Z", "date_only": false, "value": "2024-11-16T11:56:29.729819Z", "kind": "sighting", "label": "Seen", "source": "https://chaos.social/users/HonkHase/statuses/113492318503579152", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "8359520d-c0a9-42a9-babb-a4a878c3938b", "url": "https://chaos.social/users/HonkHase/statuses/113492318503579152"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.1.revision_date"}, {"timestamp": "2024-11-22T03:14:52Z", "date_only": false, "value": "2024-11-22T03:14:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9124", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "bdecaa17-05e3-4e14-bf97-a9bf63b58d86", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-47575\u662fFortinet\u7684FortiManager\u548cFortiManager Cloud\u4ea7\u54c1\u4e2d\u7684\u4e00\u4e2a\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6e90\u4e8efgfmsd\u5b88\u62a4\u8fdb\u7a0b\u7f3a\u4e4f\u5bf9\u5173\u952e\u529f\u80fd\u7684\u8eab\u4efd\u9a8c\u8bc1\u3002\nURL\uff1ahttps://github.com/XiaomingX/cve-2024-47575-poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9124"}, {"timestamp": "2024-11-28T18:35:25Z", "date_only": false, "value": "2024-11-28T18:35:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cybersecs/3322", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "7cc517e2-2db9-44b8-b26c-d2d1e7532228", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/cybersecs/3322"}, {"timestamp": "2024-11-29T13:06:54Z", "date_only": false, "value": "2024-11-29T13:06:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Leak_DBMS/1524", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d1d93483-ef0e-46f1-9d0b-8b2f43039fdd", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n@APTIRAN", "url": "https://t.me/Leak_DBMS/1524"}, {"timestamp": "2024-12-03T00:18:01Z", "date_only": false, "value": "2024-12-03T00:18:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/2110", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "86517b72-07f1-4e69-ba92-2561ff69b19f", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n\n\ud83d\udd34 Share & Support Us \ud83d\udd34\n\u26a1\ufe0f Channel : @ZeroEthical_Course", "url": "https://t.me/ZeroEthical_Course/2110"}, {"timestamp": "2024-12-03T02:39:10Z", "date_only": false, "value": "2024-12-03T02:39:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/fortimanager_rce_cve_2024_47575.rb", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "26673750-24c6-4a25-9c3d-b07766b9b59f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/fortimanager_rce_cve_2024_47575.rb"}, {"timestamp": "2024-12-20T23:56:06.450Z", "date_only": false, "value": "2024-12-20T23:56:06.450820Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldrllwvk7s2n", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e8edfa81-e08b-4008-8469-9ffe7fb2da1c", "url": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldrllwvk7s2n"}, {"timestamp": "2025-01-01T23:15:18Z", "date_only": false, "value": "2025-01-01T23:15:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iTNDwpLB0VtwMDCL0RLoBvP0alyYMwYnNHr0mKoNWYe0vIyH", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "a7c225f5-455b-425a-9bbe-1a45e430e04e"}, {"timestamp": "2025-01-06T10:55:11Z", "date_only": false, "value": "2025-01-06T10:55:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckeArsenal/311", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "47fd96c9-aa53-473a-9d34-c0315408d3c4", "content": "https://github.com/Axi0n1ze/CVE-2024-47575-POC\n\nCVE POC Exploit\n#github #poc", "url": "https://t.me/ckeArsenal/311"}, {"timestamp": "2025-01-06T13:23:51Z", "date_only": false, "value": "2025-01-06T13:23:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZeroDay_ru/370", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2561c5f2-3be0-4572-a316-d68c3ee17aa5", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "url": "https://t.me/ZeroDay_ru/370"}, {"timestamp": "2025-01-06T15:36:02Z", "date_only": false, "value": "2025-01-06T15:36:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e301362f-e298-44b5-9bc7-edd0d585cf72", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "url": "https://t.me/CyberSecurityTechnologies/11647"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": true, "value": "2025-01-08", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-00408", "record": "CNVD-2025-00408", "field": "openTime"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": true, "value": "2025-01-14", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.2.revision_date"}, {"timestamp": "2025-01-14T17:58:19.596Z", "date_only": false, "value": "2025-01-14T17:58:19.596456Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828003758066396", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "24bb100c-b10c-4320-a5a1-2248a80c98cc", "url": "https://infosec.exchange/users/screaminggoat/statuses/113828003758066396"}, {"timestamp": "2025-01-15T07:23:10.284Z", "date_only": false, "value": "2025-01-15T07:23:10.284856Z", "kind": "sighting", "label": "Seen", "source": "https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "f256f7a7-3211-4aa5-b8d8-c847f9066d43", "url": "https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "f0f132ca-4f02-4111-90f4-a28fcbc462b3"}, {"timestamp": "2025-02-15T16:51:49Z", "date_only": false, "value": "2025-02-15T16:51:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/suboxone_chatroom/2609", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "4547b05a-84a3-4806-8583-5e5ed6827e8b", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/suboxone_chatroom/2609"}, {"timestamp": "2025-02-23T02:11:00Z", "date_only": false, "value": "2025-02-23T02:11:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "8434359e-1813-439c-9626-176e244ad8c0"}, {"timestamp": "2025-02-23T04:11:04Z", "date_only": false, "value": "2025-02-23T04:11:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "6c57b234-0c0b-4090-b293-cc9ecfab6aeb"}, {"timestamp": "2025-03-11T20:37:58.600Z", "date_only": false, "value": "2025-03-11T20:37:58.600981Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "c3ed0f5c-4c62-4534-8680-f9450ae71ee7", "url": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823"}, {"timestamp": "2025-03-19T23:35:58.906Z", "date_only": false, "value": "2025-03-19T23:35:58.906707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lkrdxvogpt22", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e5b53261-eb56-4b27-83ea-076e5eab727a", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lkrdxvogpt22"}, {"timestamp": "2025-03-19T23:36:02.835Z", "date_only": false, "value": "2025-03-19T23:36:02.835716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3lkrdxzj5sv24", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "93bc381b-a2b2-492b-93f8-0daf03cf9813", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3lkrdxzj5sv24"}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": false, "value": "2025-03-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "last_revision_date"}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": false, "value": "2025-03-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-014", "record": "CERTFR-2024-ALE-014", "field": "revisions.5.revision_date"}, {"timestamp": "2025-04-11T05:28:39Z", "date_only": false, "value": "2025-04-11T05:28:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5763", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d89ad265-13a7-47db-bfe1-d7800ab94cf5", "content": "\u200b\u26a1\ufe0fSet_password, \u0438 \u0432\u0443\u0430\u043b\u044f: FortiSwitch \u0441\u0430\u043c \u043e\u0442\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447\u0438\n\n\ud83d\udcac Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 FortiSwitch \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-48887 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043e\u0442\u043a\u0440\u044b\u0442.\n\n\u041f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 FortiSwitch \u043e\u0442 6.4.0 \u0434\u043e 7.6.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.15, 7.0.11, 7.2.9, 7.4.5 \u0438 7.6.1. \u0422\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTP \u0438 HTTPS-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS command injection \u0432 FortiIsolator (CVE-2024-54024) \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 MitM-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice \u0438 FortiWeb (CVE-2024-26013 \u0438 CVE-2024-50565). \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\nFortinet \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DeepData \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Zero-Day \u0432 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 FortiClient VPN. \u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47575, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u043c\u044f FortiJump , \u2014 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u043e\u043b\u0435\u0435 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 FortiManager.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0441\u0435 \u044d\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Fortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u043e\u043a\u0443\u0441\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nFortinet \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0440\u043e\u0441\u0442\u0430 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5763"}, {"timestamp": "2025-07-20T03:00:05Z", "date_only": false, "value": "2025-07-20T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Si59L7B2mOOUAr8_144HFqGZOWLjbuFEGSaFRpGyejiLY0E", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "872b64e5-c1c2-4c0b-8fb7-2bc1dcdc5f23"}, {"timestamp": "2025-09-03T13:30:06Z", "date_only": false, "value": "2025-09-03T13:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "83df4b48-b961-4a3f-866e-30940a5ddd01"}, {"timestamp": "2025-10-21T22:55:42.072Z", "date_only": false, "value": "2025-10-21T22:55:42.072Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-47575", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:42.072Z", "date_only": false, "value": "2025-10-21T22:55:42.072Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-47575", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:10Z", "date_only": false, "value": "2025-10-22T00:33:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HX4Q-76P6-78CC", "record": "GHSA-HX4Q-76P6-78CC", "field": "modified"}, {"timestamp": "2025-10-23T21:13:03Z", "date_only": false, "value": "2025-10-23T21:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "d972400a-70a9-4fe2-9938-80fce0ca7d28"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-47575", "field": "timestamps.recorded_at", "uuid": "ad025cf1-0a97-4d4c-8f90-53a16064d812", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:25.541Z", "date_only": false, "value": "2026-02-02T12:26:25.541692Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad025cf1-0a97-4d4c-8f90-53a16064d812", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "b96b8f23-0632-4451-8738-cf1cf0634df8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad025cf1-0a97-4d4c-8f90-53a16064d812"}, {"timestamp": "2026-04-05T16:02:43.947Z", "date_only": false, "value": "2026-04-05T16:02:43.947780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mir4r4g6gm2f", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "e0ff4cc9-3419-4500-b834-f6fd685a6c05", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mir4r4g6gm2f"}, {"timestamp": "2026-06-17T07:57:20.260Z", "date_only": false, "value": "2026-06-17T07:57:20.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47575", "record": "FKIE_CVE-2024-47575", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:33.104Z", "date_only": false, "value": "2026-06-19T12:46:33.104866Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fcc78abd-8f32-4751-b2e2-6626e4d03199", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "21179d8c-5697-4c0f-bc78-5f536d2821c0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fcc78abd-8f32-4751-b2e2-6626e4d03199"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-47575", "field": "timestamps.recorded_at", "uuid": "0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:59.975Z", "date_only": false, "value": "2026-06-23T14:05:59.975655Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a3fe410-22ad-452c-ae40-b7f42ccfc5b5", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "f4d252d1-fd35-41eb-966f-2e991222cac0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a3fe410-22ad-452c-ae40-b7f42ccfc5b5"}, {"timestamp": "2026-07-09T00:15:03.590Z", "date_only": false, "value": "2026-07-09T00:15:03.590830Z", "kind": "sighting", "label": "Seen", "source": "MISP/a07068cd-abe3-47bc-b0f2-fcfdc818611a", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "4eda83cb-5337-4329-adc1-4f4fa4b84fba"}, {"timestamp": "2026-07-12T22:00:09.504Z", "date_only": false, "value": "2026-07-12T22:00:09.504718Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1055", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2c290c29-bd88-4ede-8b54-e3e737c94a4c", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/securixy_kz/1055"}, {"timestamp": "2026-07-12T22:00:09.628Z", "date_only": false, "value": "2026-07-12T22:00:09.628450Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1044", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "57bd63fa-a46a-4c33-8b3f-649fd74ff66c", "content": "\ud83e\ude78 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432 FortiManager \ud83e\ude78\n\n\ud83d\udea8  #CVE-2024-47575 \u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 FortiManager, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043a\u0430\u043a FortiJump).\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\u2022 FortiManager 7.6.0\n\u2022 FortiManager 7.4.0 - 7.4.4\n\u2022 FortiManager 7.2.0 - 7.2.7\n\u2022 FortiManager 7.0.0 - 7.0.12\n\u2022 FortiManager 6.4.0 - 6.4.14\n\u2022 FortiManager 6.2.0 - 6.2.12\n\u2022 FortiManager Cloud: \u0412\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 6.4.1 \u0434\u043e 7.4.4\n\n\ud83d\udca1 \u0414\u0435\u0442\u0430\u043b\u0438: PoC \u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u0437\u0430 147$, \u0432 \u0433\u0438\u0442\u0445\u0430\u0431\u0435 \u043a\u0443\u0447\u0430 \u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0442 Fortinet\n\ud83d\udd17 \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 \u043e\u0442 Mandiant", "url": "https://t.me/securixy_kz/1044"}, {"timestamp": "2026-07-14T00:01:01.204Z", "date_only": false, "value": "2026-07-14T00:01:01.204229Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1055", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "dd731320-8ed8-4097-b628-a2bdc029a4bd", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/securixy_kz/1055"}, {"timestamp": "2026-07-26T02:00:17.089Z", "date_only": false, "value": "2026-07-26T02:00:17.089945Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/623", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "3f5b9ee4-9e07-40dd-b631-29a51e943056", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575\nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "url": "https://t.me/cyberwarehouse/623"}, {"timestamp": "2026-07-26T02:00:17.179Z", "date_only": false, "value": "2026-07-26T02:00:17.179502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/624", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "0bd48624-963f-4ce0-a385-b7d9cb837f28", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/cyberwarehouse/624"}, {"timestamp": "2026-07-26T07:01:20.584Z", "date_only": false, "value": "2026-07-26T07:01:20.584970Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3182", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "c62c3a8b-1bb9-489a-8d94-1722a8b6f06b", "content": "\ud83d\ude32 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Positive Technologies \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043e\u0442\u043d\u0435\u0441\u043b\u0438 \u043a \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445: \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, \u0441\u0438\u0441\u0442\u0435\u043c\u0435 FortiManager, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Palo Alto Networks, \u041e\u0421 Ubuntu Server \u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel.\n\n\ud83d\udc7e \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM \u0443\u0436\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u043e\u044f\u0431\u0440\u044f (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f). \u0410 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u043e \u043c\u044b \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0431\u044b\u043b\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 (#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM).\n\n\ud83d\udca1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c The Verge, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u041e\u0421 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Windows 10 \u0438 Windows 11).\n\n1\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0445\u0435\u0448\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 NTLMv2\nCVE-2024-43451 (CVSS \u2014 6,5)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c \u0434\u0432\u0438\u0436\u043a\u043e\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c NTLMv2-\u0445\u0435\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u044d\u0442\u0430\u043f\u0430\u043c \u0430\u0442\u0430\u043a\u0438.\n\n2\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u0439 Windows (Task Scheduler), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\nCVE-2024-49039 (CVSS \u2014 8,8)\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f medium integrity \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c. \u041f\u043e\u0441\u043b\u0435 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u044d\u0442\u0430\u043f\u0430\u043c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438.\n\n3\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Microsoft Exchange, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044f\nCVE-2024-49040 (CVSS \u2014 7,5)\n\n\u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0441\u043f\u0443\u0444\u0438\u043d\u0433-\u0430\u0442\u0430\u043a\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u044d\u0442\u0430\u043f\u043e\u043c \u043f\u0440\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n4\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FortiManager, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430\nCVE-2024-47575 (CVSS \u2014 9,8)\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 FortiManager (\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u043e\u043b\u0435\u0435 55 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 FortiManager, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n5\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 needrestart \u0432 Ubuntu Server, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\nCVE-2024-48990 (CVSS \u2014 7,8)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Ubuntu Server \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0430\u043a\u0435\u0442 needrestart \u0432\u0435\u0440\u0441\u0438\u0438 3.8 \u0438 \u043d\u0438\u0436\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udca1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAN-OS, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435, \u043a\u043e\u0441\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u043e\u043b\u0435\u0435 2000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation).\n\n6\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 PAN-OS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\nCVE-2024-0012 (CVSS \u2014 9,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n7\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 PAN-OS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\nCVE-2024-9474 (CVSS \u2014 7,2)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b.\n\n8\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Zyxel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\nCVE-2024-11667 (CVSS \u2014 7,5)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Zyxel ATP \u0438 USG FLEX \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 ZLD \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0442 4.32 \u0434\u043e 5.38 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043e\u043a\u043e\u043b\u043e 15 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\ude0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u0438\u0449\u0438\u0442\u0435 \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n@Positive_Technologies", "url": "https://t.me/Positive_Technologies/3182"}, {"timestamp": "2026-07-27T00:00:26.031Z", "date_only": false, "value": "2026-07-27T00:00:26.031325Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/623", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "95aa99dc-cd10-45b2-9878-173c71c5679e", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575\nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "url": "https://t.me/cyberwarehouse/623"}, {"timestamp": "2026-07-27T00:00:26.216Z", "date_only": false, "value": "2026-07-27T00:00:26.216582Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/624", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "8c93353a-6649-4e19-9317-19a1ac03c232", "content": "\ud83d\udea8 Fortinet FortiManager Unauthenticated RCE (CVE-2024-47575)\n\nThe remote code execution vulnerability in FortiManager allows attackers to perform arbitrary operations by exploiting commands via the FGFM protocol, circumventing authentication. Referred to as FortiJump, this vulnerability provides unauthorized access to FortiManager, enabling control over FortiGate devices by taking advantage of insufficient security in command handling and device registration processes. \n\n\ud83d\udee0 Affected Versions:\nFortiManager 7.6.0\nFortiManager 7.4.0 through 7.4.4\nFortiManager 7.2.0 through 7.2.7\nFortiManager 7.0.0 through 7.0.12\nFortiManager 6.4.0 through 6.4.14\nFortiManager 6.2.0 through 6.2.12\nFortiManager Cloud 7.4.1 through 7.4.4\nFortiManager Cloud 7.2.1 through 7.2.7\nFortiManager Cloud 7.0.1 through 7.0.12\nFortiManager Cloud 6.4\n\n\ud83d\udd17 Research: \nhttps://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/\n\n\ud83d\udd17 Source: \nhttps://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\n\n#fortinet #fortimanager #fgfm #unauth #rce", "url": "https://t.me/cyberwarehouse/624"}, {"timestamp": "2026-07-29T12:02:10.169Z", "date_only": false, "value": "2026-07-29T12:02:10.169409Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4831", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "fa1ada30-94ee-44b8-a8ad-29488e57dcae", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575 # FortiManager # Vulnerability # Fortinet # FortiJump # CVE-2024-47575 https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "url": "https://t.me/reverseame/4831"}, {"timestamp": "2026-08-02T04:08:44.550Z", "date_only": false, "value": "2026-08-02T04:08:44.550511Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4831", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "39e8fcf4-a434-4673-92fe-40a52ed11f3b", "content": "Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575 # FortiManager # Vulnerability # Fortinet # FortiJump # CVE-2024-47575 https://labs.watchtowr.com/hop-skip-fortijump-fortijumphigher-cve-2024-23113-cve-2024-47575/", "url": "https://t.me/reverseame/4831"}, {"timestamp": "2026-09-10T12:15:02.540Z", "date_only": false, "value": "2026-09-10T12:15:02.540906Z", "kind": "sighting", "label": "Seen", "source": "MISP/616cfae2-9da9-48bb-8be3-053d5b26bf13", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "06a1145d-628e-4631-81ba-5f495bfcab8a"}, {"timestamp": "2026-10-15T00:59:50.269Z", "date_only": false, "value": "2026-10-15T00:59:50.269249Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117442214397044406", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "68da7af9-df9b-40a9-8fb2-5449c876600e", "content": "Hey Palo, this doesn't distract from CVE-2026-0332. Yeah, yeah, I know, they do it too.\nhttps://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/", "url": "https://infosec.exchange/users/cR0w/statuses/117442214397044406"}, {"timestamp": "2026-10-15T04:01:46.555Z", "date_only": false, "value": "2026-10-15T04:01:46.555409Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117442930683630399", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "46a22f7f-c8fa-46f0-a479-45d08147fc84", "content": "Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant\nUnit 42 has uncovered PEERSTITCH, a novel memory-resident malware deployed in an intrusion that began with exploitation of a FortiManager flaw (CVE-2024-47575) against a telecommunications organization. The attackers exfiltrated configurations, cryptographic material and database files covering more than 500 managed FortiGate firewalls, then used a second FortiOS flaw to deploy the implant. https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/", "url": "https://infosec.exchange/users/edwardk/statuses/117442930683630399"}, {"timestamp": "2026-10-15T04:01:47.553Z", "date_only": false, "value": "2026-10-15T04:01:47.553227Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxv6hnvgsk26", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "c332a0ad-0d8b-4c09-a926-17ec08953f88", "content": "Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant\n\nUnit 42 has uncovered PEERSTITCH, a novel memory-resident malware deployed in an intrusion that began with exploitation of a FortiManager flaw (CVE-2024-47575) aga... https://threatintel.cc/2026/10/15/unit-uncovers-peerstitch-a-stealthy.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxv6hnvgsk26"}, {"timestamp": "2026-10-15T16:38:47.834Z", "date_only": false, "value": "2026-10-15T16:38:47.834390Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mxwirblrz22z", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2f6c7b0c-eaa0-42dc-adab-be9ea8fbfded", "content": "Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant\n\nThis article focuses heavily on the potential for configuration theft; however, it downplays the immediate risk posed by the documented exploitation of CVE-2024-47575 in achieving initial command execution. I\u2026\n\nvia Unit 42 Palo Alto Networks", "url": "https://bsky.app/profile/arc-codex.com/post/3mxwirblrz22z"}, {"timestamp": "2026-10-15T21:14:04Z", "date_only": false, "value": "2026-10-15T21:14:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/O4UyS5n8gxPTqV1mbyyCOkHqOUMGgtWxUhfvSPNR1ZSKFKo", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "1a2489dc-22e2-43cc-9a0a-dcbac9046ae1"}, {"timestamp": "2026-10-16T10:19:27.200Z", "date_only": false, "value": "2026-10-16T10:19:27.200842Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxydzvfmqw2v", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "8c5865ef-7016-4c4e-8611-dd7b7e6969ab", "content": "Unit 42 reported a multi-stage intrusion against a telecom provider in September 2024, exploiting CVE-2024-47575 on FortiManager. Attackers exfiltrated sensitive configurations of over 500 FortiGate firewalls, enabling long-term access and traffic interception.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mxydzvfmqw2v"}, {"timestamp": "2026-10-16T10:30:29.181Z", "date_only": false, "value": "2026-10-16T10:30:29.181027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mxyenlocqv2z", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "5e5bf371-aaa2-4c7b-9774-37fe39b54301", "content": "PEERSTITCH malware exploited Fortinet FortiManager and FortiOS flaws to stealthily compromise 500+ firewalls, enabling prolonged unauthorized access in a telecom environment.\n\nCVE-2024-47575, CVE-2025-61624 #Malware #CVE #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mxyenlocqv2z"}, {"timestamp": "2026-10-16T12:30:54.392Z", "date_only": false, "value": "2026-10-16T12:30:54.392626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxylex7roi2n", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "0802136d-9c90-4c93-9c79-cd0403c46c26", "content": "CVE-2024-47575 is trending. Hype score 11, currently #4 on cvemon.\n\nA missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2024-47575", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxylex7roi2n"}, {"timestamp": "2026-10-16T17:34:39.538Z", "date_only": false, "value": "2026-10-16T17:34:39.538432Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117450953307381644", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "a93a10a6-36f2-4a24-b52f-1f1715579cd3", "content": "This one slipped through the cracks this past Patch Tuesday because the CVE started with 2025:  CVE-2025-61624 (5.4 medium) path traversal > aribtrary write/deletehttps://fortiguard.fortinet.com/psirt/FG-IR-26-122\nUnit 42's blog post states it was exploited in the wild: https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/\n\nThe attackers exploited another vulnerability, CVE-2025-61624, via FortiOS auto-script path traversal. This exploit facilitated the deployment of PEERSTITCH, a novel, memory-resident ARM64 malware.\n#threatintel #eitw #CVE #fortinet #ioc", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117450953307381644"}, {"timestamp": "2026-10-19T08:00:51Z", "date_only": false, "value": "2026-10-19T08:00:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2346", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "715d1b5b-e3e8-43cc-b6d7-858e8644ea7b", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc40 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 PEERSTITCH \u2014 \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 \u0434\u043b\u044f FortiGate, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0433\u0440\u0443\u043f\u043f\u0430 CL-STA-0954/UNC5820 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 FortiManager \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 (MSP). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 FortiJump (CVE-2024-47575) \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0441\u0447\u0451\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u0430\u043c \u0434\u043b\u044f 500 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u043c \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043e\u0432. \u0418\u043c\u043f\u043b\u0430\u043d\u0442 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b FortiOS \u0438 \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0440\u0442\u043e\u0432.\n\n\ud83d\udd0e \u041e\u0431\u0437\u043e\u0440 TTPs \u0433\u0440\u0443\u043f\u043f\u044b Silent Lynx/UAT-6275/TAG-193, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u0438\u0432 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432 \u0434\u0435\u0432\u044f\u0442\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0421\u041d\u0413, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0438, \u043f\u0440\u0438\u0440\u043e\u0434\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043e\u0434\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b Word \u0441 \u043c\u0430\u043a\u0440\u043e\u0441\u0430\u043c\u0438 \u0438 \u0430\u0440\u0445\u0438\u0432\u044b WinRAR, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 CVE-2025-8088, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0438\u0441\u044c \u043d\u0430 GitHub. \u0410\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443 \u0443\u0433\u0440\u043e\u0437, \u0447\u0442\u043e \u0438 Tomiris/Storm-0473.\n\n\ud83d\ude2e \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434 \u00ab\u044d\u0444\u0435\u043c\u0435\u0440\u043d\u043e\u0439\u00bb \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430 UNC7017 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e AOMEI Backupper, \u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0438\u0445 \u043d\u0430 \u0440\u0430\u0437\u0434\u0430\u0447\u0443 \u0412\u041f\u041e \u043b\u0438\u0448\u044c \u043a\u0440\u0430\u0442\u043a\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043e\u043a\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430, \u043a\u0430\u0436\u0434\u043e\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u0441\u0435\u0433\u043e 5-10 \u043c\u0438\u043d\u0443\u0442. \u0421 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u043e\u0441\u044c \u0412\u041f\u041e CROSSROAD \u0434\u043b\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 SHINYROAD \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043c\u0438\u0448\u0435\u043d\u0435\u0439.\n\n\ud83c\udf10 \u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 UTA0576, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 0day \u0432 Ivanti Connect Secure \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041d\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0430\u0440\u043e\u043b\u0438 LAPS \u0438 \u043a\u043b\u044e\u0447\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BitLocker. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u044d\u0442\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430. \n\n\ud83d\udfe0\u041e\u0431\u0437\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0438 TTPs \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Insolent Hyena, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u0435\u0440\u0435\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e NightStrike, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u0432 AdaptixC2, Cobalt Strike \u0438 Havoc.\n\n\ud83d\udcbb \u0410\u043d\u0430\u043b\u0438\u0437 TTPs \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 MicrosoftSystem64 RAT, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0447\u0435\u0440\u0435\u0437 88 GitHub-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043d\u0430 \u0442\u0435\u043c\u044b AI-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u0442\u0440\u0435\u0439\u0434\u0438\u043d\u0433\u0430, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 npm-\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u041f\u041e. \u041a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u043e\u0440\u043a\u0438 \u0434\u0435\u043b\u0430\u044e\u0442 \u0442\u0430\u043a\u0438\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u043d\u0430 \u0432\u0438\u0434, \u0430 \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u0445 \u0434\u0430\u0436\u0435 \u0432\u0441\u043f\u043b\u044b\u043b \u0431\u0435\u0437 \u044f\u0432\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 ChatGPT \u0438 Google AI Overview. \n\n\ud83d\udc6e\u200d\u2640\ufe0f \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u043b \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 143 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 34 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f D-Link NAS, Ubiquiti NVR \u0438, \u0447\u0442\u043e \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435, \u0441\u0435\u0440\u0432\u0435\u0440\u044b SAP NetWeaver, \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b \u0438\u0445 \u0432 \u0443\u0437\u043b\u044b \u0441\u0435\u0442\u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438 IPRoyal. \n\n\ud83d\udcf1 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0433\u043e Android-\u0431\u0430\u043d\u043a\u0435\u0440\u0430 Hirudo, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u0438\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0439\u0441\u043a\u0438\u0445 \u0431\u0430\u043d\u043a\u043e\u0432 \u0438\u0445 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u043e\u043f\u0438\u044f\u043c\u0438, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, Accessibility \u0438 Play Integrity. \u041e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0448\u043e\u043f\u0438\u043d\u0433\u0430 \u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0445 \u0432\u0438\u0434\u0435\u043e. \u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0412\u041f\u041e \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u043d\u0430 \u043a\u0440\u0430\u0436\u0443 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435, \u0418\u043d\u0434\u0438\u0438, \u041c\u0435\u043a\u0441\u0438\u043a\u0435, \u041c\u0430\u0440\u043e\u043a\u043a\u043e \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435. \n\n\ud83d\udfe1 \u0420\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Aoki. \u0415\u0433\u043e \u043d\u043e\u0432\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043a\u0440\u0430\u0434\u0443\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0441\u0435\u0441\u0441\u0438\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 Claude, Codex, Cursor, GitHub Copilot \u0438 Kiro. \u041f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \n\n\ud83c\udf4f \u0410\u043d\u0430\u043b\u0438\u0437 Divine Seagull \u2014 \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u0438\u0442\u0430 \u0434\u043b\u044f iOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u0430\u0451\u0442\u0441\u044f \u043a\u0438\u0442\u0430\u0435\u044f\u0437\u044b\u0447\u043d\u044b\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0445\u0435\u043c. \u0412 \u044d\u0442\u043e\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u0437\u0430\u043d\u043e\u0432\u043e \u0443\u043f\u0430\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 Coruna \u0438 DarkSword, \u043e\u043d \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e iOS 26.1. \u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e WebKit-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u2328\ufe0f\u041a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 45 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 Al Jazeera \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Candiru/Integrity Labs. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u043d\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u2014 \u044d\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u0430\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u0430 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u043d\u043b\u0430\u0439\u043d-\u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0430\u0445. \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u0412\u041f\u041e \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0443\u0436\u043d\u044b\u043c \u043c\u0438\u0448\u0435\u043d\u044f\u043c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Discover-Tech, \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u044e\u0449\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043c\u0438\u0448\u0435\u043d\u0438 \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u0430\u0443\u043a\u0446\u0438\u043e\u043d\u0430\u0445. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 AdFection.\n\n\u2757\ufe0f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f CVE-2026-76519, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Email Gateway, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043f\u0438\u0441\u044c\u043c\u043e \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0435\u043f\u0443\u0442\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udfe2\u041d\u0435 \u043e\u0442\u0441\u0442\u0430\u0451\u0442 \u0438 Palo Alto Networks \u2014 CVE-2026-0322 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u043c PA-Series, VM-Series \u0438 Panorama. \u0423\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\ud83e\udeb2 \u041a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 10 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 CVE-2026-110447 \u2014 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Collabora Online Built-in CODE Server \u0434\u043b\u044f Nextcloud. \u041f\u043e\u0441\u043b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u043d\u0430 PHP, \u0438\u0449\u0443\u0442 \u0431\u0430\u0437\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438.\n\n\ud83d\udfe0PoC \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c AnyPwn \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 AnyDesk \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root \u0432 Linux \u0447\u0435\u0440\u0435\u0437 TCP-\u043f\u043e\u0440\u0442 7070 \u0435\u0449\u0451 \u0434\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 8.0.3.\n\n\u2699\ufe0f \u0412 \u043d\u043e\u0447\u044c \u043d\u0430 11 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0435\u0440\u0435\u0432\u0435\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u0445\u043e\u043b\u043e\u0434\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0432\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0438\u0445 \u0441\u0443\u043f\u0435\u0440\u043c\u0430\u0440\u043a\u0435\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Intermarch\u00e9 \u0438 Super U, \u0432 \u0440\u0435\u0436\u0438\u043c \u0440\u0430\u0437\u043c\u043e\u0440\u043e\u0437\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b Danfoss, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u0440\u0447\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0432\u043e\u0437\u0433\u043e\u0440\u0430\u043d\u0438\u044f\u043c. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0442\u0440\u0451\u0445 \u0434\u043d\u0435\u0439 \u0447\u0438\u0441\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 Danfoss StoreView \u0432\u043e \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u043b\u043e\u0441\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 70%.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2346"}, {"timestamp": "2026-10-19T10:20:55.427Z", "date_only": false, "value": "2026-10-19T10:20:55.427496Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/117467070760246648", "record": "cve-2024-47575", "field": "creation_timestamp", "uuid": "96347b7a-8daf-4454-9b74-cb7d9c01815b", "content": "Unit 42 researchers analyse an intrusion where CL-STA-0954 stole configurations and cryptographic materials for over 500 FortiGate firewalls. The attackers deployed PEERSTITSH, an ARM64 implant that runs in memory and hides in legitimate traffic. https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/", "url": "https://infosec.exchange/users/VirusBulletin/statuses/117467070760246648"}, {"timestamp": "2026-10-19T13:44:08Z", "date_only": false, "value": "2026-10-19T13:44:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8726", "record": "CVE-2024-47575", "field": "creation_timestamp", "uuid": "2ccd5ad2-326d-4b79-b907-a193575f3807", "content": "Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 APT-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 UNC5820 (CL-STA-0954), \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0440\u0435\u0434\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE \u0432 FortiManager, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-47575 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a 0-day.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Mandiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c UNC5820 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443 Palo Alto Networks, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u043e\u0433\u043e \u0436\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f UNC5820 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e CVE-2025-61624, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438.\u00a0\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f FortiOS, FortiPAM, FortiProxy \u0438 FortiSwitchManager \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2026 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Fortinet \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u043b\u0430 \u0435\u0451 \u043a\u0430\u043a 0-day.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, UNC5820 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b 0-day \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 FortiGate \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PeerStitch, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM64 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u0444\u0438\u043a, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u0430\u043a\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b FortiJump \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 FortiManager, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiGate \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u0430\u0440\u0445\u0438\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e FortiManager, \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate \u0438 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c CVE-2025-61624 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f PeerStitch.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u00ab\u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0434\u0435\u043c\u043e\u043d\u044b \u0441\u043b\u0443\u0436\u0431\u044b IKE/IPsec VPN \u0432 FortiOS, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439, \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043c\u043e\u0441\u0442 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiOS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b \u0441\u0435\u0431\u044f \u0437\u0430 FortiManager \u0432 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 FortiGate \u0438 FortiManager (FGFM), \u043e\u0442\u0434\u0430\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0435\u0440 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b \u0441\u0432\u043e\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Palo Alto Networks, UNC5820 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0433\u043e FortiManager \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-26008, \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e FortiManager.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e PeerStitch, \u0432 \u0446\u0435\u043b\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0420\u0430\u0431\u043e\u0442\u0430\u044f \u043a\u0430\u043a \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u043e\u0441\u0442 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f, \u0443\u043a\u043b\u043e\u043d\u044f\u044f\u0441\u044c \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.", "url": "https://t.me/true_secator/8726"}]}