Fortinet on Wednesday said it observed "recent abuse" of a
five-year-old security flaw in FortiOS SSL VPN in the wild under
certain configurations. The vulnerability in question is
CVE-2020-12812 (CVSS score: 5.2), an improper authentication
vulnerability in SSL VPN in FortiOS that could allow a user to log
in successfully without being prompted for the second factor of
authentication if the
Read more https://thehackernews.com/2025/12/fortinet-warns-of-active-exploitation.html

