Despite the elevated number of potentially vulnerable Fortinet instances, most of which were in the U.S. and India, there has been no evidence suggesting widespread exploitation of the critical flaw, which could be leveraged to trigger arbitrary code or command execution via specially crafted HTTP requests, reported Shadowserver.

Source: SC Magazine