The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.4.3 | Sep 30, 2026 | Jun 11, 2024 |
| Fortios | — | Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.2.9Upgrade FortiOS to 7.4.4 | Oct 7, 2024 | Jun 11, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub