Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks

Fortinet warns that threat actors are actively exploiting a critical 5-year-old FortiOS vulnerability that allows bypassing two-factor authentication on FortiGate firewalls. The vulnerability remains unpatched on many systems and continues to be exploited in ongoing attacks. Organizations using FortiGate firewalls are at risk of unauthorized access despite having 2FA enabled. This represents a significant security concern as 2FA is considered a critical security control. The persistent exploitation of this old vulnerability highlights the importance of timely patching and system updates.