Will FortiBleed (Fortinet credential exposure) lead to documented critical infrastructure compromise by end of 2026?

CISA reports malicious actors are actively exploiting compromised Fortinet device credentials globally across government and private sector organizations in what is being tracked as FortiBleed. Source: CISA Alerts.

Resolution Criteria

Confirmed public disclosure by CISA, vendor, or credible security researchers of FortiBleed-linked compromise of a critical infrastructure network or federal agency system; OR inclusion of a FortiBleed-related CVE in CISA KEV.