Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858) Fortinet has begun releasing FortiOS versions that fix CVE-2026-24858, a critical zero-day vulnerability that allowed attackers to log into targeted organizations’ FortiGate firewalls. “This vulnerability was found being exploited in the wild by two malicious FortiCloud accounts, which were locked out on [January 22, 2026],” the company shared. About CVE-2026-24858 On January 20, several Fortinet customers revealed that attackers gained access to their FortiGate firewalls and created new local admin accounts despite the devices running the then-latest FortiOS versions. Those releases included patches for CVE-2025-59718, a previously exploited vulnerability that similarly allowed attackers to bypass authentication…