ctrlINT What the industry said about every indicator, with the quote

CVE-2025-24472Vulnerability

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by Infosecurity Magazine · last reported

Last reported 1 month ago

CISA KEVAdded 18 Mar 2025
Fix due 8 Apr 2025
Used by ransomware: knownCISA KEV catalogue
EPSS7.2%
higher than 94% of CVEsFIRST EPSS, as of 24 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

  1. “CVE-2025-24472”

    Recorded FutureVendor
    August 2026 CVE Landscape

  2. “CVE-2025-24472 is a high severity vulnerability which can allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF pro…”

    Infosecurity MagazineNews
    Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure

Indicators reported together

named in the same reports

Also named with it: CVE-2024-55591, CVE-2025-49113, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2026-33824, CVE-2026-0300, CVE-2026-33017, CVE-2017-0199, CVE-2022-0847, CVE-2026-34486, CVE-2026-39987, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-3055, CVE-2026-12569, CVE-2026-3395, CVE-2025-62593

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-24472 here?
No account needed. We do not store your IP address.