ctrlINT What the industry said about every indicator, with the quote

CVE-2024-47575Vulnerability

Fortinet FortiManager Missing Authentication Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by Palo Alto Unit 42 · last reported

Last reported 5 days ago

CISA KEVAdded 23 Oct 2024
Fix due 13 Nov 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS94.8%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “Initial access was obtained through the exploitation of a critical remote code execution (RCE) bug in FortiManager, tracked as CVE-2024-47575 and patched in October 2024 as a zero-day.”

    SecurityWeekNews
    Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

  2. “The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager appliance.” reads the report published by Palo Alto Networks.”

    Security AffairsNews
    PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

  3. “…ked as CL-STA-0954 (aka UNC5820), with initial access obtained by exploiting a critical Fortinet FortiManager flaw dubbed FortiJump (CVE-2024-47575).”

    The Hacker NewsNews
    PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

  4. “The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager appliance.”

    Palo Alto Unit 42Vendor
    Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Indicators reported together

named in the same reports
Copy these 15 indicators · defanged

Also named with it: CVE-2025-61624, CVE-2024-26008, CVE-2024-26009, CVE-2025-59718, CVE-2025-59719

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2024-47575 here?
No account needed. We do not store your IP address.