Tag: CVE-2026-24858

1 Attack Reports | 1 Vulnerabilities

Attack reports

Stolen Service Accounts Lead to Rogue Workstations and Deep AD Compromise

SentinelOne's DFIR team has responded to multiple incidents involving compromised FortiGate NGFW appliances used to establish footholds in targeted environments. Attackers exploited vulnerabilities or weak credentials to access FortiGate devices, extract configuration files containing service accou…
credential theft
lateral movement
fortigate
rmm tools
CVE-2025-59718
CVE-2025-59719
CVE-2026-24858
2026-03-11
ngfw
Published: March 11, 2026
Linked vulnerabilities : CVE-2025-59718 (CVSS 9.8), CVE-2025-59719 (CVSS 9.8), CVE-2026-24858 (CVSS 9.8)
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-24858

9.8
    Fortinet
  • Fortianalyzer
  • Fortimanager
  • Fortiproxy
  • Fortiweb
  • Fortios
Published: January 27, 2026
Click here to see more Vulnerabilities