VulnerabilitycriticalExploited in the wild

Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026

Security Affairsby @securityaffairsJan 28, 2026 · 15:58 UTC (Jan 28, 2026)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2026-24858 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-24858 CVE-2025-59718 CVE-2025-59719

Tags: cve-2026-24858 cve-2025-59718 cve-2025-59719 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-59718	Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy	9.8	68%	KEV	Dec 9, 2025 KEV Dec 16, 2025
CVE-2025-59719	Unauthenticated SAML Signature Bypass in Fortinet FortiWeb (FortiCloud SSO)	9.8	29%		Dec 9, 2025
CVE-2026-24858	FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products	9.8	87%	KEV	Jan 27, 2026 KEV Jan 27, 2026

From the original article

3 min read at securityaffairs.com

Fortinet released fixes for a critical FortiOS SSO auth bypass (CVE-2026-24858) actively exploited, impacting FortiOS, FortiManager, and FortiAnalyzer. Fortinet started rolling out patches for a critical FortiOS flaw under active attack. The bug, CVE-2026-24858 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.