A command injection zero-day in several versions of Fortinet’s FortiWeb firewall products, with exploitation underway.