FORTINET WARNS OF AUTH BYPASS 0-DAY EXPLOITED TO HIJACK FIREWALLS

Summary from the TLDR InfoSec newsletter

Fortinet is warning customers of an actively exploited vulnerability in FortiOS and FortiProxy. The vulnerability allows remote attackers to gain super admin privileges via maliciously crafted requests to the Node.js websocket module. Fortinet reports that attackers are exploiting this vulnerability to randomly generate admin or local accounts and add them to new or existing SSL VPN groups.