Fortinet CVEs — PoCs and detection rules¶
5 Fortinet vulnerabilities with detection-only proof-of-concept code and Docker labs; 5 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23113 — Fortinet FortiOS Format String RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47575 — FortiManager Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55591 — FortiOS Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21762 — Fortinet FortiOS Out-of-Bounds Write | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11616 — Fortinet FortiOS SSL VPN | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |