Skip to content
COOEY

EXPOSURES › CVE-2025-59718

CVE-2025-59718

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-12-16 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-59718 ↗
⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Fortinet products allow unauthenticated attackers to bypass authentication via crafted SAML messages

Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb have a cryptographic signature verification issue that lets attackers bypass SSO login, as actively exploited. Apply patches immediately.

Shame score — Active exploitation of a severe authentication bypass vulnerability in widely used DIB products.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Fortinet · vendorMultiple Products · product
DESCRIPTION

Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.