The vulnerability of the SAML Response Message Handler component in FortiOS operating systems, FortiWeb network layer for web applications, FortiProxy proxy server for protecting against internet attacks, and FortiSwitchManager local management platform allows attackers to bypass existing security mechanisms.

SAML Response Handler flaw enables bypass with forged SAML requests across FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager.

Reporter	Title	Published	Views	Family All 31
Circl	CVE-2025-59719	9 Dec 202519:53	–	circl
CISA KEV Catalog	Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability	16 Dec 202500:00	–	cisa_kev
CISA	Fortinet Releases Guidance to Address Ongoing Exploitation of Authentication Bypass Vulnerability CVE-2026-24858	28 Jan 202612:00	–	cisa
CNNVD	Fortinet FortiWeb 数据伪造问题漏洞	9 Dec 202500:00	–	cnnvd
CVE	CVE-2025-59719	9 Dec 202517:20	–	cve
Cvelist	CVE-2025-59719	9 Dec 202517:20	–	cvelist
EUVD	EUVD-2025-202191	9 Dec 202518:30	–	euvd
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Fortinet Fortiproxy	27 Dec 202504:24	–	githubexploit
Tenable Nessus	Fortinet Fortigate SSO Login Authentication Bypass (FG-IR-25-647)	9 Dec 202500:00	–	nessus
Tenable Nessus	Fortinet FortiWeb SSO Login Authentication Bypass (FG-IR-25-647)	9 Dec 202500:00	–	nessus