Skip to content
Over 25,000 Fortinet Devices Vulnerable to Attacks via FortiCloud SSO

Over 25,000 Fortinet Devices Vulnerable to Attacks via FortiCloud SSO

First seen 29 Dec 2025, 22:10 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

More than 25,000 Fortinet devices with FortiCloud SSO enabled are exposed to remote attacks due to a critical authentication bypass vulnerability tracked as CVE-2025-59718. The U.S. has the highest number of affected devices, followed by India, as reported by Shadowserver. Fortinet released patches for the vulnerabilities on December 9, 2025.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Volt Typhoon, Coathanger and CISA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed