CISA on Tuesday added the flaw to the KEV catalog, a day after Fortinet revealed an authentication bypass CVE-2022-40684 that it patched last week was already being exploited in the wild.

An authentication bypass flaw in security firm Fortinet's products, which was patched on 6 October, is being exploited in the wild, the company has confirmed. It said CVE-2022-40684 was an authent ...