FBI and CISA have information indicating APT actors are using multiple CVEs to exploit Fortinet FortiOS vulnerabilities.

https://www.ic3.gov/Media/News/2021/210402.pdf