sign in--:--:--UTC

CVE-2022-40684

exploited in the wild☆ pin

CVSS

—

Reports

6

First seen

Oct 10, 2022

Last seen

Aug 4, 2026

Affected product

Fortinet FortiOS

Associated actors

APT36 ×1 C0XMO ×1 INC Ransom ×1 Lazarus Group ×1 Qilin ×1 StrikeShark ×1

Recent reports

Incransom publishes LCC Group (Liberty Commercial Center) as ransomware victim

ransomware.liveAug 4, 2026 High

StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

HKCERTJul 15, 2026 High

June 2026 CVE Landscape: 60 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktJul 10, 2026 Critical

CVE-2022-40684: Critical Authentication Bypass in Fortinet FortiOS, FortiProxy, FortiSwitchManager

NICS TaiwanOct 17, 2022 High

Multiple Vulnerabilities in Fortinet Products

GovCERT.HKOct 11, 2022 Critical

High Threat Security Alert: Remote Authentication Bypass in FortiOS and FortiProxy

GovCERT.HKOct 10, 2022

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans