Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59718 | Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy | 9.8 | 68% | KEV | KEV |
| CVE-2026-24858 | FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products | 9.8 | 87% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Fortinet has begun releasing FortiOS versions that fix CVE-2026-24858, a critical zero-day vulnerability that allowed attackers to log into targeted organizations’ FortiGate firewalls. “This vulnerability was found being exploited in the wild by two malicious FortiCloud accounts, which were locked out on [January 22, 2026],” the company shared .
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.