27575mp4 May 2026

Missing authentication for a critical function in the fgfmsd daemon. Severity: Rated 9.8 (Critical) on the CVSS scale.

It was first observed as a zero-day exploit as early as June 2024, notably by a threat cluster tracked as UNC5820 . Exploitation Context 27575mp4

A remote, unauthenticated attacker could execute arbitrary code or commands by sending specially crafted requests to an exposed FortiManager device. Missing authentication for a critical function in the