Fortinet Issues Critical Patches for RCE Vulnerabilities in Fortigate Devices

Fortinet has released firmware updates that fix a critical pre-authentication remote code execution (RCE) vulnerability in SSL VPN devices. The updates were released prior to the disclosure of the vulnerability, which is expected on June 13, 2023. The vulnerability affects all previous versions of Fortinet devices and could be exploited by threat actors to gain initial access to networks for data theft and ransomware attacks. Admins are urged to apply the security updates as soon as possible.