It was first observed as a zero-day exploit as early as June 2024, notably by a threat cluster tracked as UNC5820 . Exploitation Context
Missing authentication for a critical function in the fgfmsd daemon. Severity: Rated 9.8 (Critical) on the CVSS scale. 27575mp4
This vulnerability involves a missing authentication flaw in the FortiGate-to-FortiManager (FGFM) protocol used by Fortinet's network management appliances. Key Technical Details It was first observed as a zero-day exploit