CISA Adds Fortinet Vulnerability to KEV Catalog After Active Exploitation

Cybersecuritynews •Abinaya • December 17, 2025

CISA has officially added CVE-2025-59718 to its Known Exploited Vulnerabilities (KEV) catalog on December 16, 2025. Designating a critical deadline of December 23, 2025, for organizations to apply necessary remediation measures. This action reflects the vulnerability’s active exploitation in the wild and the immediate threat it poses to enterprise networks. The vulnerability affects multiple Fortinet […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Critical Fortinet Vulnerability to KEV Catalog Amid Active Exploitation CISA added CVE-2025-59718 to its Known Exploited Vulnerabilities catalog on December 16, 2025. Organizations are required to implement remediation measures by December 23, 2025, due to the vulnerability's active exploitation affecting multiple Fortinet products. 3 sources 46

Extracted Entities

CVEs (1)

CVE-2025-59718