Active Exploitation of FortiOS SSL VPN 2FA Bypass

Active Exploitation of FortiOS SSL VPN 2FA Bypass
You are here:

EXECUTIVE SUMMARY

Active exploitation of a FortiOS SSL VPN vulnerability enables attackers to bypass 2FA and gain unauthorized access to affected systems. Organizations using impacted FortiOS versions are at increased risk of credential abuse, lateral movement, and compromise of critical network resources.

  • CVE ID: CVE-2020-12812
  • Active Region: Global
  • Affected Sector: Any sector using FortiGate VPN infrastructure
  • Affected Product: FortiOS SSL VPN
  • Severity: High
  • Published Date: December 25, 2025

AFFECTED VERSIONS

  • FortiOS 6.0.9 and earlier
  • FortiOS 6.2.0 through
  • FortiOS……

Download the Report

Date

Share

Previous Reports