CVE-2025-59719 - Vulnerability Details

Related Threat Clusters

• Exploitation of FortiGate SSO Vulnerabilities by Threat Actors

  Threat actors are actively exploiting critical authentication bypass vulnerabilities in Fortinet's FortiGate appliances, specifically CVE-2025-59718 and CVE-2025-59719. These vulnerabilities allow unauthenticated single…

  4 articles · Updated December 16, 2025
• Fortinet Issues Security Advisory for Critical Vulnerabilities

  On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote…

  88 articles · Updated March 10, 2026
• Fortinet Addresses Critical Vulnerabilities in Key Products

  Fortinet has released security updates to address critical vulnerabilities (CVE-2025-59718 and CVE-2025-59719) affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager products. Users and administrators are…

  9 articles · Updated December 12, 2025
• Fortinet SSO Vulnerabilities Exploited for Admin Access on Firewalls

  Fortinet's Single Sign-On (SSO) vulnerabilities, CVE-2025-59718 and CVE-2025-59719, are being actively exploited by attackers to gain unauthorized administrative access to FortiGate firewalls. These flaws allow…

  4 articles · Updated January 22, 2026
• Critical Vulnerabilities Found in Fortinet Products

  The Canadian Centre for Cyber Security has issued an alert regarding critical vulnerabilities affecting Fortinet products, specifically related to FortiCloud SSO Login Authentication Bypass. These vulnerabilities may…

  1 article · Updated December 16, 2025
• Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

  Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code,…

  6 articles · Updated December 10, 2025
• Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities

  Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities,…

  3 articles · Updated December 10, 2025
• Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability

  Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with…

  35 articles · Updated January 23, 2026
• Outdated Embedded Browsers in Smart Devices Increase Cybersecurity Risks

  A study by KU Leuven reveals that many smart devices, including tablets, game consoles, and smart TVs, are equipped with embedded web browsers running outdated software, some as much as three years old. This lack of…

  2 articles · Updated December 17, 2025
• Over 25,000 Fortinet Devices Vulnerable to Attacks via FortiCloud SSO

  More than 25,000 Fortinet devices with FortiCloud SSO enabled are exposed to remote attacks due to a critical authentication bypass vulnerability tracked as CVE-2025-59718. The U.S. has the highest number of affected…

  2 articles · Updated December 22, 2025

Recent Intelligence Reports

• FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025 — Rescana · March 11, 2026
• SIEM Rules for detecting exploitation of vulnerabilities in FortiCloud SSO — Kaspersky · February 5, 2026
• Fortinet confirms new zero — Csoonline · January 23, 2026
• Fortinet Confirms Active Exploitation of FortiCloud SSO Authentication Bypass Vulnerability — Cybersecuritynews · January 23, 2026
• Active Exploitation Of Fortinet SSO Flaw Targets Firewalls For Admin Takeover — Gbhackers · January 22, 2026
• Potential attacks threaten over tens of thousands of Fortinet devices — Scworld · December 22, 2025
• Over 25,000 FortiCloud SSO devices exposed to remote attacks — Bleepingcomputer · December 19, 2025
• Most smart devices run outdated web browsers — News.Risky.Biz · December 17, 2025

Related Entities