Tag

#fortibleed

1 post tagged #fortibleed.

Analysis · Jun 29, 2026 · Colten Anderson

The FortiGate firmware was current. The admin password hashes were not.

FortiOS 7.2.11, 7.4.8, and 7.6.1 introduced PBKDF2 hashing for administrator accounts. The migration is per-login: SHA-256 hashes stay in place until each admin authenticates post-upgrade. The FortiBleed campaign in June 2026 compromised roughly 75,000 internet-facing firewalls by cracking credentials on devices that cleared the patching check.