The threat intelligence report from CIRCL OSINT Feed documents IDS alerts indicating reconnaissance activity targeting Fortigate VPN devices by sending repeated GET requests to the /remote/logincheck endpoint. This behavior aligns with attempts to exploit CVE-2023-27997, a known vulnerability in Fortigate VPN. The report does not specify affected versions or confirm active exploitation in the wild. No patch availability is indicated in this data.

The impact is currently assessed as low based on the report's severity rating. The activity represents reconnaissance or exploitation attempts against Fortigate VPN devices but lacks confirmation of successful exploitation or widespread impact. No known exploits in the wild are reported, suggesting limited immediate risk from this specific alert.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance regarding CVE-2023-27997. Since no patch availability is indicated here, organizations using Fortigate VPN should consult Fortinet's official advisories for updates. Monitoring for unusual repeated requests to /remote/logincheck and applying vendor-recommended mitigations is advised. No specific mitigation instructions are provided in this report.