RaqibCTI
Search the threat graph — actor, CVE, technique, victim…
⌘K
◇ SIGN IN
Knowledge
/
KEV Catalog
/
CVE-2025-24472
Corpus
+ Request intel
workspace
CVE
CVE-2025-24472
P1
⬤ KNOWN RANSOMWARE USE
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · FortiOS and FortiProxy
Date added (CISA)
2025-03-18
Remediation due
2025-04-08
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Associated with
Related to
←
Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTRE
campaign
Correlated cluster
2026-09-16
Overview
ATT&CK
Related
ATT&CK mapping
No ATT&CK mapping yet
The CTID Mappings Explorer hasn't published an exploitation/impact technique mapping for this CVE yet.
Source:
NVD ↗
·
CISA KEV Catalog ↗
CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability · RaqibCTI