Feed/CVE-2024-55591
CVE-2024-55591CRITICALCVSS 9.8CISA KEV: Actively Exploited

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Published Jan 14, 2025·Updated Aug 5, 2026

NVD Description

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Public Exploits & PoCs7 found

PoC: cve-2024-55591-poc

Educational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.

1

[POC] CVE-2024-55591 — CVE-2024-55591

#PoC for CVE-2024-55591 Authentication bypass Affects: FortiOS 7.0.0 to 7.0.16 , FortiProxy 7.0.0 to 7.0.19 ,FortiProxy 7.2.0 to 7.2.12

[POC] CVE-2024-55591 — CVE-2024-55591-POC

A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.

[POC] CVE-2024-55591 — CVE-2024-55591

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

[POC] CVE-2024-55591 — Private-CVE-2024-55591.

Private CVE-2024-55591

[POC] CVE-2024-55591 — fortios-auth-bypass-check-CVE-2024-55591

Checks for authentication bypass vulnerability inFortinet's FortiOS, potentially exploited by remote attackers.

PoC: CVE-2024-55591

CVE-2024-55591 — FortiOS / FortiProxy Authentication Bypass

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free