Back Securityaffairs.Co

U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog

Securityaffairs.Co •Pierluigi Paganini • January 28, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Broadcom VMware vCenter Server vulnerability, tracked as CVE-2026-24858 (CVSS score of 9.4), to its Known Exploited Vulnerabilities (KEV) catalog. This week, Fortinet started rolling out patches for […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with attackers bypassing security measures that were thought to be effective following a December patch. Organizations are advised to monitor their systems closely for suspicious activity. 35 sources 38

Extracted Entities

CVEs (1)

CVE-2026-24858

Platforms (1)

VMware VCenter Server