World Cybersecurity NewsWorld Cybersecurity NewsHome

Topic

FortiOS

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog Including Cisco FMC and Fortinet FortiOS
🇯🇵Security NEXT•Sep 10

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog Including Cisco FMC and Fortinet FortiOS

Vulnerabilities & Exploits
Top Cybersecurity Stories of the Week: WordPress XSS Flaw, Microsoft Patch Tuesday, Cisco Zero-Day and More
🇯🇵Security NEXT•Aug 17

Top Cybersecurity Stories of the Week: WordPress XSS Flaw, Microsoft Patch Tuesday, Cisco Zero-Day and More

Vulnerabilities & Exploits
Weekly Roundup: Critical Vulnerabilities Hit VMware ESX, FortiOS, Chrome, fastjson, Cisco FMC and Ruby on Rails
🇯🇵Security NEXT•Aug 3

Weekly Roundup: Critical Vulnerabilities Hit VMware ESX, FortiOS, Chrome, fastjson, Cisco FMC and Ruby on Rails

Vulnerabilities & Exploits

Premium Weekly Digest

Exclusive cybersecurity analysis, straight to your inbox

Curated intelligence you won't find in the free feed. $9.99/week, cancel anytime.

Subscribe
🇯🇵Jul 28

CISA Adds Exploited Flaws in FortiOS and VeloCloud Orchestrator to Known Exploited Vulnerabilities Catalog

The US Cybersecurity and Infrastructure Security Agency has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. CVE-2026-16812 affects the on-premises version of Arista VeloCloud Orchestrator and allows OS command injection that can lead to data leakage, tampering, and denial of service. The flaw carries a maximum CVSS v3.1 base score of 10.0 and is rated Critical. CVE-2025-68686 impacts Fortinet FortiOS and can be used to bypass specific patches and steal sensitive information when combined with another vulnerability that grants prior filesystem access. Federal agencies must remediate the VeloCloud issue by July 30 and the FortiOS issue by August 10.

Security NEXT•Vulnerabilities & Exploits