CVE-2022-29060: Fortinet Fortiddos

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device.

Affected products

• Fortinet Fortiddos: version 5.1.0 only; version 5.2.0 only; version 5.3.0 only; version 5.3.1 only; version 5.4.0 only; version 5.4.1 only; …

Published 2022-07-19. Last modified 2026-06-17.