SSL VPN

FortiOS SSL-VPN Heap Overflow: Pre-Auth Emergency

Post author:Prabhu Kalyan Samal
Post published: September 3, 2026
Post category:Cloud & Infrastructure Security Web & API Security

CVE-2022-42475 was a CVSS 9.8 pre-auth heap overflow in FortiOS SSL-VPN, patched silently then confirmed exploited. Edge memory safety lessons.

SonicWall SMA Zero-Day: Inside the January 2021 SSL-VPN Campaign

Post author:Prabhu Kalyan Samal
Post published: September 3, 2026
Post category:Security Web & API Security

Days after SUNBURST, researchers caught attackers exploiting a 9.8-severity SQL injection in SonicWall SMA 100 appliances — including against SonicWall’s own network. This incident file covers how unauthenticated credential extraction turned edge appliances into ransomware on-ramps.