Over 10,000 Internet-exposed Fortinet firewalls remain vulnerable to a five-year-old two-factor authentication bypass vulnerability that is being actively exploited by attackers. The vulnerability allows threat actors to bypass 2FA protections on affected Fortinet devices, potentially granting unauthorized access to corporate networks. Despite the age of the vulnerability, thousands of organizations have failed to apply necessary patches, leaving their infrastructure exposed to ongoing attacks. The widespread exposure of these critical network security devices represents a significant risk to organizational security postures.