Fortinet’s latest zero-day vulnerability carries frustrating familiarities for customers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59718 | Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy | 9.8 | 68% | KEV | KEV |
| CVE-2026-24858 | FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products | 9.8 | 87% | KEV | KEV |
From the original article
4 min read at cyberscoop.com
Attackers have exploited the critical defect to reconfigure firewall settings and create unauthorized accounts with privileged access to multiple versions of the vendor’s security products. Fortinet office in Burnaby, BC, Canada, July 7, 2023.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.