#fortimanager

Analysis · Jun 21, 2026 · Colten Anderson

FortiManager's FortiJump patch is the start of the job, not the end

Patching CVE-2024-47575 stops new exploitation. If an attacker reached your FortiManager first, they already have your FortiGate configs and password hashes. Here's what you actually have to do.