Exploit / PoCcritical

Fortinet fixed two critical authentication

Security Affairsby @securityaffairsDec 10, 2025 · 22:04 UTC (Dec 10, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-59718 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-59718 CVE-2025-59719

Tags: cve-2025-59718 cve-2025-59719 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-59718	Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy	9.8	68%	KEV	Dec 9, 2025 KEV Dec 16, 2025
CVE-2025-59719	Unauthenticated SAML Signature Bypass in Fortinet FortiWeb (FortiCloud SSO)	9.8	29%		Dec 9, 2025

From the original article

2 min read at securityaffairs.com

Fortinet patched 18 flaws, including two authentication-bypass bugs affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO enabled. Fortinet addressed 18 vulnerabilities, including two authentication-bypass flaws, tracked as CVE-2025-59718 and CVE-2025-59719 (CVSS score of 9. 1), affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager when FortiCloud SSO is enabled.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.