Back Securityaffairs.Co

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

Securityaffairs.Co •Pierluigi Paganini • January 14, 2026

Fortinet fixed six security flaws, including two critical bugs in FortiFone and FortiSIEM that attackers could exploit without authentication. Fortinet released patches for six vulnerabilities, including two critical flaws in FortiFone and FortiSIEM that could be exploited without authentication to leak configuration data or enable code execution. The first vulnerabilty, tracked as CVE-2025-64155 (CVSS score […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Addresses Critical Vulnerabilities in Multiple Products Fortinet has patched critical vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. These security defects, which allow for authentication bypass and could lead to configuration leaks and code execution, were found to be exploitable without authentication. Users with FortiCloud SSO login authentication enabled are particularly impacted. 6 sources 45

Extracted Entities

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)