Vulnerability in Fortinet FortiOS
CVSS score
9.6
EPSS probability
%94.1
Risk score
18.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Fortinet - Authentication Bypass
binarywarm/exp-cmd-add-admin-vpn-CVE-2024-55591
A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.
CVE-2024-55591 — FortiOS / FortiProxy Authentication Bypass
sysirq/fortios-auth-bypass-exploit-CVE-2024-55591
sysirq/fortios-auth-bypass-poc-CVE-2024-55591
Educational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591
Similar Vulnerabilities
Vulnerability in Fortinet FortiOS, FortiProxy, FortiSwitchManager
Out-of-bounds write in Fortinet Fortiproxy
Out-of-bounds write in Fortinet FortiProxy
OS command injection in Fortinet Fortisandbox
Vulnerability in Fortinet FortiSwitchManager
OS command injection in Fortinet Fortisandbox
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-55591"