Category roundup
Firewall coverage should emphasize exploit activity, remote attack surface, and fixed-version clarity. Based on the current official-source dataset, Fortinet is still the strongest operational source, Zyxel broadens the SMB firewall lane cleanly, and Cisco Secure Firewall now earns a real place here because the official advisory gives affected hardware, fixed releases, and urgent operator action.
This roundup only references official vendor material. It is meant to shorten the path from “I heard about a firewall issue” to “what fixed version does the vendor actually say to run?”
Cisco says affected Secure Firewall ASA and FTD hardware can retain a persistent implant even after the September 2025 fixes, so operators should check for compromise, reimage if needed, and move to the listed fixed releases and hotfixes.
Zyxel published a clean firewall advisory for privilege escalation issues affecting USG FLEX H devices and explicitly called out the patched train.
Fortinet says this FortiOS and FortiProxy issue may allow remote unauthenticated code execution via crafted HTTP requests and notes potential exploitation in the wild.
Fortinet says crafted requests may allow a remote attacker to gain super-admin privileges and explicitly notes that the issue is being exploited in the wild.