There are some clues into Fortinet’s thinking about not issuing CVEs until much later in this, a long running issue.
Fellow customers - is this how you want your vendors to function?
There is no hiding. I was quite clear about the severity and the Vulns will be published in due course.
"Every other vendor" does not do this post-Mythos - many have changed the way their report CVEs in response to customer demands post Mythos.