CVE-2025-24472: FortiOS Authentication Bypass (Super Admin)
Can FortiOS be compromised without credentials?
An authentication bypass using an alternate path in FortiOS. Remote attackers can gain super_admin privileges via crafted CSF proxy requests, enabling complete device takeover without credentials.
Impact & Exploitation
Exploited by ransomware operators to gain initial access to corporate networks. Super admin access enables firewall rule modification, traffic interception, and VPN credential theft.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.