onyx

onyx --cves cve-2024-50568

CVE-2024-50568

MEDFortinet FortiOS
score
<0.1
cvss
5.9
epss
0.4%
published
2025-06-10
kev added
—
first seen

Fortinet FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, before 7.0.14 and FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.9, before 7.0.16 contain an authentication bypass caused by crafted TCP requests spoofing downstream device identity, letting unauthenticated attackers spoof device identity, exploit requires knowledge of device specific data.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2025-06-10 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.4%2026-09-23: epss 0.4%2026-09-24: epss 0.4%2026-09-25: epss 0.4%2026-09-26: epss 0.4%2026-09-27: epss 0.4%2026-09-29: epss 0.4%2026-09-30: epss 0.4%2026-10-01: epss 0.4%2026-10-02: epss 0.4%2026-10-03: epss 0.4%2026-10-04: epss 0.4%2026-10-05: epss 0.4%2026-10-06: epss 0.4%2026-10-07: epss 0.4%2026-10-08: epss 0.4%2026-10-09: epss 0.4%2026-10-10: epss 0.4%2026-10-11: epss 0.4%2026-10-12: epss 0.4%2026-10-13: epss 0.4%2026-10-14: epss 0.4%2026-10-15: epss 0.4%2026-10-16: epss 0.4%2026-10-18: epss 0.4%2026-10-19: epss 0.4%2026-10-20: epss 0.4%2026-10-21: epss 0.4%0.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-300

References 1