Unrated severityCISA KEVNVD Advisory· Published Jan 14, 2025· Updated Feb 26, 2026
CVE-2024-55591
CVE-2024-55591
Description
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
Affected products
2- Range: 7.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
2- Thus Spoke…The GentlemenCheck Point Research · May 13, 2026
- The State of Ransomware – Q1 2026Check Point Research · May 11, 2026