Vulnerabilities fixed in Fortinet products

🗓️ 28 Jan 2026 15:46:10Reported by NCSCType

Fortinet fixes vulnerabilities in FortiOS, FortiProxy, FortiWeb, and FortiSwitchManager that allow unauthenticated access via crafted SAML, forged requests, and persistent sessions; disable FortiCloud single sign on.

Reporter	Title	Published	Views	Family All 86
ATTACKERKB	CVE-2025-59718	9 Dec 202517:20	–	attackerkb
ATTACKERKB	CVE-2025-62631	9 Dec 202517:18	–	attackerkb
BDU FSTEC	The vulnerabilities of the FortiCloud SSO authentication function in FortiOS operating systems, FortiWeb web applications at the network layer, FortiProxy proxy servers for protecting against internet attacks, and the local management platform FortiSwitchManager, allow attackers to bypass existing security mechanisms.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAML Response Message Handler component in FortiOS operating systems, FortiWeb network layer for web applications, FortiProxy proxy server for protecting against internet attacks, and FortiSwitchManager local management platform allows attackers to bypass existing security mechanisms.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSL-VPN technology for FortiOS operating systems allows a perpetrator to gain unauthorized access to protected information.	27 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS operating systems allows attackers to enhance their privileges.	27 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ApacheCookieParse method in FortiWeb web applications allows attackers to bypass existing security restrictions and execute arbitrary commands.	10 Apr 202600:00	–	bdu_fstec
Circl	CVE-2025-59718	9 Dec 202519:07	–	circl
Circl	CVE-2025-59719	9 Dec 202519:53	–	circl
Circl	CVE-2025-62631	9 Dec 202519:09	–	circl

Source	Link
arcticwolf	www.arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-configuration-changes-fortinet-fortigate-devices-via-sso-accounts/
arcticwolf	www.arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-268
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-411
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-647
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-945
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-984
cert	www.cert.at/en/blog/2026/1/look-at-forticloud-sso-bypass-exploitation
fortinet	www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios

28 Jan 2026 15:46Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5 - 9.8

EPSS0.65825

SSVC