The vulnerabilities of the FortiCloud SSO authentication function in FortiOS operating systems, FortiWeb web applications at the network layer, FortiProxy proxy servers for protecting against internet attacks, and the local management platform FortiSwitchManager, allow attackers to bypass existing security mechanisms.

Fortinet FortiOS SSO, FortiWeb, FortiProxy, and FortiSwitchManager have cryptographic verification flaws allowing bypass.

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2025-59718	9 Dec 202517:20	–	attackerkb
Circl	CVE-2025-59718	9 Dec 202519:07	–	circl
CISA KEV Catalog	Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability	16 Dec 202500:00	–	cisa_kev
CISA	Fortinet Releases Guidance to Address Ongoing Exploitation of Authentication Bypass Vulnerability CVE-2026-24858	28 Jan 202612:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	16 Dec 202512:00	–	cisa
CNNVD	Fortinet多款产品数据伪造问题漏洞	9 Dec 202500:00	–	cnnvd
CVE	CVE-2025-59718	9 Dec 202517:20	–	cve
Cvelist	CVE-2025-59718	9 Dec 202517:20	–	cvelist
EUVD	EUVD-2025-202198	9 Dec 202518:30	–	euvd
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Fortinet Fortiproxy	27 Dec 202504:24	–	githubexploit

Vulners

Node

fortinet fortiwebRange7.6.0–7.6.5

fortinet fortiproxyRange7.6.0–7.6.4

fortinet fortiwebRange7.4.0–7.4.10

fortinet fortiproxyRange7.4.0–7.4.11

fortinet fortiproxyRange7.2.0–7.2.15

fortinet fortiproxyRange7.0.0–7.0.22

fortinet fortiosRange7.4.0–7.4.9

fortinet fortiosRange7.6.0–7.6.4

fortinet fortiosRange7.2.0–7.2.12

fortinet fortiosRange7.0.0–7.0.18

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-647
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail
fortiguard	www.fortiguard.com/psirt/FG-IR-25-647

17 Dec 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 39.8

CVSS 210

EPSS0.65825