FortiOS & Atlassian Confluence Actively Exploited (CVE-2024-21762 / CVE-2023-22527)

Scope: Fortinet FortiOS/FortiProxy, Atlassian Confluence

Severity: Red

Two actively exploited vulnerabilities, an out-of-bounds write RCE in Fortinet FortiOS/FortiProxy and a template injection RCE in Atlassian Confluence are being leveraged by attackers to execute arbitrary code, bypass authentication, deploy ransomware, and move laterally across enterprise networks. Both vulnerabilities have seen confirmed in-the-wild exploitation, making immediate patching critical. Organizations should restrict external access to VPN and application interfaces and enforce least privilege with strong authentication across affected systems.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the recommendations and apply the necessary updates.