Search/CVE-2025-59718
● CVE — Critical

CVE-2025-59718

Vendorfortinet, siemensProductfortios, fortiproxy, fortiswitchmanager, ruggedcom ape1808 firmwareDiscoveredDec 9, 2025UpdatedJun 9, 2026

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
68.3%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
8
sources referencing this CVE
Related IOCs
1
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 5, 2026
▲ 4.85pp
63.4% → 68.3% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
14 relationships
Timeline
disclosure → media coverage
Dec 9, 2025
Disclosure — published as a CVE record. · last revised by NVD Jun 9, 2026
Dec 10, 2025
thehackernews.com reports: Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws
Dec 16, 2025
redhotcyber.com reports: CVE-2025-59718 e CVE-2025-59719 su FortiGate in sfruttamento attivo
Dec 16, 2025
thehackernews.com reports: Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
Dec 17, 2025
helpnetsecurity.com reports: Attackers are exploiting auth bypass vulnerability on FortiGate firewalls (CVE-2025-59718)
Jan 21, 2026
bleepingcomputer.com reports: Fortinet admins report patched FortiGate firewalls getting hacked
Jan 21, 2026
helpnetsecurity.com reports: Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?
Jan 22, 2026
redhotcyber.com reports: Un bypass della patch sfruttata in attacchi attivi colpisce FortiOS
Jan 22, 2026
acn.gov.it reports: Rilevato possibile sfruttamento attivo di vulnerabilità già note in prodotti Fortinet
Public PoC (2)
github.com/exfil0/CVE-2025-59718-PoCgithub.com/moften/CVE-2025-59718-Fortinet-Poc
Unverified third-party code — review before executing.