CVE-2025-59718 - Vulnerability Details

Related Threat Clusters

• Exploitation of FortiGate SSO Vulnerabilities by Threat Actors

  Threat actors are actively exploiting critical authentication bypass vulnerabilities in Fortinet's FortiGate appliances, specifically CVE-2025-59718 and CVE-2025-59719. These vulnerabilities allow unauthenticated single…

  4 articles · Updated December 16, 2025
• Fortinet Issues Security Advisory for Critical Vulnerabilities

  On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote…

  88 articles · Updated March 10, 2026
• Over 10,000 Fortinet Firewalls Vulnerable to 2FA Bypass Exploits

  More than 10,000 Fortinet firewalls remain exposed to a critical two-factor authentication bypass vulnerability (CVE-2020-12812) that has been actively exploited. This flaw, first disclosed in July 2020, continues to…

  6 articles · Updated January 5, 2026
• Fortinet Addresses Critical Vulnerabilities in Key Products

  Fortinet has released security updates to address critical vulnerabilities (CVE-2025-59718 and CVE-2025-59719) affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager products. Users and administrators are…

  9 articles · Updated December 12, 2025
• Fortinet SSO Vulnerabilities Exploited for Admin Access on Firewalls

  Fortinet's Single Sign-On (SSO) vulnerabilities, CVE-2025-59718 and CVE-2025-59719, are being actively exploited by attackers to gain unauthorized administrative access to FortiGate firewalls. These flaws allow…

  4 articles · Updated January 22, 2026
• Critical Vulnerabilities Found in Fortinet Products

  The Canadian Centre for Cyber Security has issued an alert regarding critical vulnerabilities affecting Fortinet products, specifically related to FortiCloud SSO Login Authentication Bypass. These vulnerabilities may…

  1 article · Updated December 16, 2025
• Fortinet FortiWeb CVE-2025-64446 Exploited for Admin Takeover

  A critical path-traversal vulnerability (CVE-2025-64446) in Fortinet's FortiWeb web application firewall has been exploited by threat actors since early October 2025. This flaw allows unauthenticated attackers to create…

  3 articles · Updated December 16, 2025
• CISA Adds Critical Fortinet Vulnerability to KEV Catalog Amid Active Exploitation

  CISA added CVE-2025-59718 to its Known Exploited Vulnerabilities catalog on December 16, 2025. Organizations are required to implement remediation measures by December 23, 2025, due to the vulnerability's active…

  3 articles · Updated December 17, 2025
• Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

  Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code,…

  6 articles · Updated December 10, 2025
• Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities

  Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities,…

  3 articles · Updated December 10, 2025

Recent Intelligence Reports

• FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025 — Rescana · March 11, 2026
• SIEM Rules for detecting exploitation of vulnerabilities in FortiCloud SSO — Kaspersky · February 5, 2026
• Fortinet’s latest zero — Cyberscoop · January 28, 2026
• Fortinet confirms new zero — Csoonline · January 23, 2026
• FortiGate Firewalls Targeted in Automated Attacks to Harvest Configuration Data — Cyberpress · January 23, 2026
• Fortinet Confirms Active Exploitation of FortiCloud SSO Authentication Bypass Vulnerability — Cybersecuritynews · January 23, 2026
• Active Exploitation Of Fortinet SSO Flaw Targets Firewalls For Admin Takeover — Gbhackers · January 22, 2026
• Fortinet SSO Vulnerability Actively Exploited to Hack Firewalls and Gain Admin Access — Cybersecuritynews · January 22, 2026

Related Entities