Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Jun 12, 2023

1 new incident, 0 with updates.

Started

  • ClosedPatched

    FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997)

    A heap overflow in the FortiOS and FortiProxy SSL-VPN allowed pre-authentication remote code execution. Fortinet said it may have been exploited in a limited number of cases, and published it alongside its analysis of the Volt Typhoon campaign.

    Fortinet FortiOS and FortiProxy SSL-VPNClosed Jun 13, 2023