CISA has warned that attackers are actively using a Fortinet security flaw and ordered U.S. federal agencies to fix it by September 12. The article says CISA added the Fortinet issue alongside exploited Cisco and Citrix bugs to the Known Exploited Vulnerabilities catalog, which is the U.S. government list of flaws being used in real attacks. The affected Fortinet product and CVE are the concrete anchor for this story, and the KEV listing signals live exploitation and urgent remediation.
Why it matters: Organizations using the affected Fortinet product should treat this as an immediate patching priority because active exploitation means attackers are already using it in the wild. Federal agencies have a hard deadline, and private-sector defenders should verify exposure, apply vendor fixes, and review logs for signs of compromise.
info@thehackernews.com (The Hacker News)
2026.09.10
100% relevant
The tracked list includes matching KEV/exploitation stories for the Cisco and Citrix flaws, but no clearly corresponding existing story here for the Fortinet flaw referenced in this article, so this establishes the Fortinet KEV addition as a separate tracked event.
← Back to all stories