Vulnerabilitymedium

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

The Hacker Newsby @TheHackersNewsJan 23, 2026 · 12:30 UTC (Jan 23, 2026)1 min read1

Read at thehackernews.com

Analyze CVE-2025-59718 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-59718 CVE-2025-59719

Tags: cve-2025-59718 cve-2025-59719 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-59718	Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy	9.8	68%	KEV	Dec 9, 2025 KEV Dec 16, 2025
CVE-2025-59719	Unauthenticated SAML Signature Bypass in Fortinet FortiWeb (FortiCloud SSO)	9.8	29%		Dec 9, 2025

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 23, 2026 Network Security / Vulnerability Fortinet has officially confirmed that it's working to completely plug a FortiCloud SSO authentication bypass vulnerability following reports of fresh exploitation activity on fully-patched firewalls.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.