CVE-2023-27997 CISA KEV · Actively exploitedLinked to ransomware
Out-of-bounds write in Fortinet Fortiproxy
CVSS score
9.8
EPSS probability
%85.7
Risk score
16.8
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.
Makefile Go / Python
FortiGate SSL-VPN CVE-2023-27997 Exploit PoC Script with ROP Chain
Makefile Go / Python
GitHub
Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2022-40684 Actively exploited
Vulnerability in Fortinet FortiOS, FortiProxy, FortiSwitchManager
F
Workaround Public Exploits:10EPSS %100
9.6
CVE-2024-55591 Actively exploited
Vulnerability in Fortinet FortiOS
F
Workaround Public Exploits:11EPSS %94
9.6
CVE-2024-21762 Actively exploited
Out-of-bounds write in Fortinet FortiProxy
F
Patch status unknown Public Exploits:9EPSS %83
9.8
CVE-2026-25089 Actively exploited
OS command injection in Fortinet Fortisandbox
F
Patch status unknown Public Exploits:2EPSS %76
9.1
CVE-2025-59718 Actively exploited
Vulnerability in Fortinet FortiSwitchManager
F
WorkaroundEPSS %68
9.8
CVE-2026-39808 Actively exploited
OS command injection in Fortinet Fortisandbox
F
Patch status unknown Public Exploits:8EPSS %47
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-27997"