Post-Exploitation

vulnerabilities 2026-10-17
PEERSTITCH: Memory-Only FortiGate Implant Deployed via FortiOS CVE-2025-61624 After FortiManager Breach
Unit 42 details PEERSTITCH, a fileless implant injected into FortiOS miglogd and iked after FortiJump and a CVE-2025-61624 path traversal gave root on FortiGate firewalls.
fortinet apt network-appliance vpn privilege-escalation post-exploitation

PEERSTITCH: Memory-Only FortiGate Implant Deployed via FortiOS CVE-2025-61624 After FortiManager Breach