Helpnetsecurity

Exploited CVE-2025-59718 Compromises FortiGate Firewalls Despite Patches

First seen 25 Jan 2026, 12:39 UTC • Feeds2.Feedburner

•24.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

FortiGate firewalls are being compromised through CVE-2025-59718, a critical authentication bypass flaw. Despite Fortinet's claims that the vulnerability was patched in FortiOS versions 7.6.4 and above, reports indicate that attackers are still able to exploit the flaw in newer releases. This issue was first exploited in December 2025.

How this analysis works

Attack Flow

Continue Reading

Exploitation of FortiGate SSO Vulnerabilities by Threat Actors Operation Escaneo Targets Latin American Critical Infrastructure Critical Vulnerabilities in FortiOS and Arista VeloCloud Under Active Exploitation New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure Cyberattack on Polish Energy Sector Exploits Private APN Vulnerability FortiBleed Campaign Compromises 75,000+ Fortinet Devices Globally

Exploited CVE-2025-59718 Compromises FortiGate Firewalls Despite Patches

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading