abraxas/Fortigate-SSL-VPN-Exploit-Kit

PoC

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

view exploit source poc_in_githubauthor abraxaspublished 2026-09-01catalog poc_in_github
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-21762UScritical9.8OT criticalKEV
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0…
CVE-2023-27997UScritical9.8OT criticalKEV
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan