Critical
KEV + Ransomware
CVE-2024-55591
The Gentlemen Ransomware Group Exploits CVE-2024-55591 in Attack on Mackay Sugar
Vendor / product: Fortinet FortiOS and FortiProxy
Event date: 2026-06-10
Victim organization: Mackay Sugar
Public PoC: Yes
First tracked by RiskWire: 2026-10-07
CISA KEV catalog
Added to KEV
Federal remediation due
2025-01-21 (652 days overdue)
Ransomware campaign use
Known
CISA description
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Named threat actors
The Gentlemen
Sources & citations (1)
- The Gentlemen Ransomware Becomes Fastest Scaling Threat in 2026 que.com · 2026-10-07
References
See CVE-2024-55591 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →