Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways
Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.
CSIRTS triage
- What
- A campaign is affecting Fortinet firewalls and VPN gateways.
- Who is affected
- Organizations using Fortinet services.
- Urgency
- Immediate action is urged due to potential targeting.
- Action
- Take action as advised by NCSC.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.ncsc.gov.uk/news/advice-following-global-targeting-of-fortinet-firewalls-and-vpn-gateways
Recent advisories for Alert
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalCVE-2026-11387: The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugi…nvd · 2026-07-01
- mediumCVE-2026-57956: SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticate…nvd · 2026-06-29
- unknownCVE-2025-7958: A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authent…nvd · 2026-06-26
- unknownSecurity Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)jpcert · 2026-06-10
- unknownexploitedSecurity Alert: Microsoft Releases June 2026 Security Updatesjpcert · 2026-06-10
- unknownexploitedSecurity Alert: [Updated] Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI A…jpcert · 2026-05-22
More from NCSC-UK Publications
- unknownCyber Essentials Pathways: from proof of concept to cyber confidence2026-07-09
- unknownCyber Shield: The path to an agentic AI future for cyber defence2026-07-07
- unknownBuilding more resilient CNI: what industry pen testers told us2026-07-01
- unknownThe AI shift in cyber risk: why leaders must act now2026-06-22
- unknownThe 'vibe coding spectrum' approach to AI-assisted software development2026-06-18