CVE-2026-20253

Treat FortiBleed/FortiGate exposure as credential-containment

→Revoke active admin, VPN, and cloud sessions before treating password rotation as sufficient; rotate admin, local, VPN, and exposed secrets; restrict login and management surfaces; force re-authentication; replace SMS MFA with stronger MFA; rebuild or factory-reset only where persistence or tampering is suspected.

Prediction resolved by human review (abandoned): Abandoned as a generation-quality artifact (HAL-36): template-shaped two-source claim with over-broad OR-criteria and an embedded due timestamp; criteria are not genuinely evaluable, so no hit/miss verdict is meaningful. Generation and gate hardening shipped in PR #1432; this row is excluded from calibration.