Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs

According to Cyble’s research published on November 24, multiple Fortinet products are affected by an alternate path flaw tracked as CVE-2022-40684, including FortiOS, FortiProxy, and FortiSwitchManager.