Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

Back Thehackernews

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

Thehackernews •[email protected] (The Hacker News) • January 23, 2026

Share: View original

Discover how leading MSSPs use AI to automate security management, boost margins, and scale services without extra headcount.

Join cybersecurity leaders Kumar Saurabh and Francis Odum to learn how to build, buy, and automate smarter for a modern, efficient SOC.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with attackers bypassing security measures that were thought to be effective following a December patch. Organizations are advised to monitor their systems closely for suspicious activity. 35 sources 38

Extracted Entities

Platforms (2)

FortiCloud Fortigate