3,280,081 Fortinet Devices Online With Exposed Web Properties Under Risk

Cybersecuritynews •Abinaya • January 30, 2026

Over 3,280,081 Fortinet Devices Were exposed, with web properties running vulnerable Fortinet devices affected by CVE-2026-24858, a severe authentication-bypass flaw actively exploited in the wild. The vulnerability, rated 9.4 on the CVSS scale, affects multiple Fortinet product lines, including FortiOS, FortiManager, FortiAnalyzer, FortiProxy, and FortiWeb. Critical Authentication Bypass Exploited in Active Attacks CVE-2026-24858 allows threat actors […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with attackers bypassing security measures that were thought to be effective following a December patch. Organizations are advised to monitor their systems closely for suspicious activity. 35 sources 38

Extracted Entities

3,280,081 Fortinet Devices Online With Exposed Web Properties Under Risk

The full story

Extracted Entities

CVEs (1)

Platforms (4)

Vulnerabilities (1)