https://poc.intelseclab.com/tags/ssl-vpn/Latest proof-of-concept entries.Hugoen-usFri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-31_cve-2022-40684-fortios-auth-bypass-scanner/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-31_cve-2022-40684-fortios-auth-bypass-scanner/Critical severity (CVSS 9.8) — network · CVE-2022-40684. Status: Patched (FortiOS ≥7.2.2, ≥7.0.7; FortiProxy ≥7.2.1, ≥7.0.7; FortiSwitchManager ≥7.2.1). Affects: Fortinet FortiOS (FortiGate firewalls), FortiProxy web proxy, FortiSwitchManager web management interface / administrative REST API. Tags: fortios, fortiproxy, fortiswitchmanager, authentication-bypass, rest-api, header-injection, loopback-spoofing, fortigate, ssl-vpn, scanner.networkCriticalfortiosfortiproxyfortiswitchmanagerauthentication-bypassrest-apiheader-injectionloopback-spoofingfortigatessl-vpnscannerhttps://poc.intelseclab.com/pocs/web/2026-05-16_fortios-sslvpn-rce-cve-2024-21762/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_fortios-sslvpn-rce-cve-2024-21762/Critical severity (CVSS 9.6) — web · CVE-2024-21762. Status: Weaponized. Affects: Fortinet FortiOS SSL VPN (sslvpnd). Tags: RCE, out-of-bounds-write, SSL-VPN, FortiOS, edge-appliance, unauthenticated, KEV.webCriticalRCEout-of-bounds-writeSSL-VPNFortiOSedge-applianceunauthenticatedKEV