CVE-2018-13379

Fortinet's FortiOS allowed unauthenticated attackers to download system files via a path traversal vulnerability, actively exploited in the wild and linked to ransomware activity.

A path traversal flaw in Fortinet FortiOS SSL VPN allowed unauthorized access to system files, potentially enabling data exfiltration and system compromise. DIB organizations using FortiOS must immediately verify patching and review access controls to prevent exploitation and maintain CMMC compliance. This highlights the importance of vulnerability management and timely patching.

Shame score — The vulnerability's ease of exploitation and active exploitation by ransomware groups demonstrates a significant failure in secure coding practices and risk management.