CVE-2024-47575: FortiManager Unauthenticated RCE (FortiJump)
What is FortiJump?
A missing authentication vulnerability in FortiManager's FGFM (FortiGate to FortiManager) daemon. Unauthenticated attackers can execute arbitrary code and commands via specially crafted requests, dubbed "FortiJump" by researchers.
Impact & Exploitation
Exploited as a zero-day since June 2024. Over 50 organizations compromised before disclosure. Enables complete control of FortiManager and all managed FortiGate firewalls.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.