Private Keys in the Fortigate Leak

A few days ago, a download link for a leak of configuration files for Fortigate/Fortinet devices was posted on an Internet forum. It appears that the data was collected in 2022 due to a security vulnerability known as CVE-2022-40684. According to a blog post by Fortinet in 2022 , they were already aware of active exploitation of the issue back then. It was first reported by heise , a post by Kevin…