CVE-2024-27782: Fortinet Fortiaiops

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.

Affected products

• Fortinet Fortiaiops: version 2.0.0 only

Published 2024-07-09. Last modified 2026-06-17.