The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog, indicating evidence of active exploitation.