Yokogawa FAST/TOOLS
View CSAF
Summary
Successful exploitation of these vulnerabilities could allow an attacker to redirected users to malicious sites, decrypt communications, perform a man-in-the-middle (MITM) attack, execute...
Request smuggling attack in FortiOS GUI
CVSSv3 Score: 5.2
An HTTP request smuggling vulnerability in FortiOS may allow an unauthenticated attacker to smuggle an unlogged http...
Missing authorization on CSV user import
CVSSv3 Score: 6.8
A missing authorization vulnerability in FortiAuthenticator may allow a read-only admin to make modification to local users...
LDAP authentication bypass in Agentless VPN and FSSO
CVSSv3 Score: 7.5
An Authentication Bypass by Primary Weakness vulnerability in FortiOS fnbamd may allow an unauthenticated attacker to bypass...
Format String Vulnerability in CAPWAP fast-failover mode
CVSSv3 Score: 6.7
A Use of Externally-Controlled Format String vulnerability in FortiGate may allow an authenticated admin to execute unauthorized...
XSS via back button
CVSSv3 Score: 7.9
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FortiSandbox may allow an...
Firewall policy bypass in FSSO Terminal Services Agent
CVSSv3 Score: 3.8
An Improper Verification of Source of a Communication Channel vulnerability in FortiOS FSSO Terminal Services Agent may...
CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. - Read more
Arbitrary XML file write in FCConfig
CVSSv3 Score: 6.4
An Improper Link Resolution Before File Access vulnerability in FortiClient Windows may allow a local low-privilege attacker...
SSL-VPN Symlink Persistence Patch Bypass
CVSSv3 Score: 5.3
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in FortiOS SSL-VPN may allow a remote...
Latest article
GreatXML zero-day BitLocker bypass doesn’t seem to work, yet
A disgruntled researcher who has been publishing zero-day Microsoft Windows vulnerabilities for the past several months released a new exploit...
New Windows Zero-Day Claims BitLocker Bypass Amid Microsoft Disclosure Fight
A new Windows zero-day reportedly bypasses BitLocker, adding pressure on Microsoft as researchers debate the exploit’s real-world impact.
The post New Windows Zero-Day Claims BitLocker...
Fancy Bear Hackers Abuse EdgeRouters and Cloud Services to Launch Stealthy Cyberattacks
One of the most persistent hacking groups in the world has found a new way to stay hidden. The threat actor known as...
Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol
Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others - Read...
