Fortinet Endpoint Management Zero-Day Under Active Exploitation

Attackers are actively exploiting two critical flaws in Fortinet's endpoint management security server software, including a fresh zero-day enabling unauthenticated remote code execution. Fortinet issued a hotfix and promised a full patch. The vulnerabilities affect enterprise environments relying on Fortinet's centralized endpoint management platform for security policy enforcement.