Fortinet
CompanySecurity timeline
- Activity reported by Fortinet Threat ResearchBITTER espionage group expands its arsenal with the PapRAT remote access trojan
- Vulnerability reported by CSO OnlineCritical Brotli decoder flaw CVE-2026-111497 (Broccoli2Shell) exploited, added to CISA KEV
- Vulnerability reported by Horizon3.aiSSRF flaws reported in Fortinet FortiSIEM GUI and Cisco Finesse management interface
Recent news
BITTER espionage group expands its arsenal with the PapRAT remote access trojan
FortiGuard Labs has analysed a cyberespionage campaign by the BITTER group against South Asian organisations. The campaign uses three attack chains and the PapRAT remote access trojan.
Critical Brotli decoder flaw CVE-2026-111497 (Broccoli2Shell) exploited, added to CISA KEV
CVE-2026-111497, nicknamed Broccoli2Shell, is an out-of-bounds write in the Google Brotli decoder that can be exploited remotely without authentication. It can cause memory corruption, information disclosure, crashes or code execution. CISA added it to its Known Exploited Vulnerabilities catalogue on 27 October 2026. Software that bundles Brotli, including Node.js, .NET, PowerShell, Bun, Envoy Proxy, Istio and Python packages, may be affected.
SSRF flaws reported in Fortinet FortiSIEM GUI and Cisco Finesse management interface
Fortinet has published an advisory for a server-side request forgery flaw in the FortiSIEM GUI, scored CVSSv3 3.8, which lets an authenticated attacker send crafted HTTP requests that originate from the device. Separately, CVE-2026-20362 affects the web-based management interface of Cisco Finesse, where an unauthenticated remote attacker can use crafted HTTP requests to obtain limited sensitive information from associated services (CVSS v3.1 7.2, High). The Cisco issue was found by Horizon3 researchers.