Description
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
Scoring
- CVSS: 9.8 (CRITICAL, 3.1)
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2025-12-16
- Remediation due date: 2025-12-23
- Known ransomware campaign use: Unknown
Weakness types (CWE)
- CWE-347
References
- https://fortiguard.fortinet.com/psirt/FG-IR-25-647
- https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/
- https://cert-portal.siemens.com/productcert/html/ssa-864900.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59718
More from Fortinet
- CVE-2025-61624 — Multiple Products
- CVE-2026-104286 — FortiMail
- CVE-2025-25249 — Multiple Products
- CVE-2025-68686 — FortiOS
- CVE-2026-39808 — FortiSandbox
More CRITICAL-severity vulnerabilities · All exploited vulnerabilities