Category roundup
Firewall coverage should emphasize exploit activity, remote attack surface, and fixed-version clarity. Based on the current official-source dataset, Fortinet is still the strongest operational source and Zyxel is the best second lane for broadening coverage without diluting source quality.
This roundup only references official vendor material. It is meant to shorten the path from “I heard about a firewall issue” to “what fixed version does the vendor actually say to run?”
Zyxel published a clean firewall advisory for privilege escalation issues affecting USG FLEX H devices and explicitly called out the patched train.
Fortinet says this FortiOS and FortiProxy issue may allow remote unauthenticated code execution via crafted HTTP requests and notes potential exploitation in the wild.
Fortinet says crafted requests may allow a remote attacker to gain super-admin privileges and explicitly notes that the issue is being exploited in the wild.