Cybersecurity researchers have disclosed details of a large-scale campaign targeting exposed Fortinet and Palo Alto Networks firewalls, exposing over 70,000 credentials.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2025-64446 | 9.8 | CRITICAL | Yes, added 2025-11-14 | 2025-11-21 |
| CVE-2026-0257 | 7.8 | HIGH | Yes, added 2026-05-29 | 2026-06-01 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
Business impact
Organizations face significant risks, including persistent remote access and data exfiltration, affecting operations and potentially leading to financial losses and legal issues.
Industries affected
The campaign targets a broad range of sectors, including Asia Pacific, Latin America, Europe, and the Middle East and North Africa.
Users affected
End users and organizations are affected, as attackers can gain access to sensitive information, leading to potential data breaches and loss of confidentiality.
