Fortinet Patches Critical Authentication Bypass Vulnerabilities

Fortinet has issued patches for 18 vulnerabilities across its products, including two flaws that could allow authentication bypass, tracked as CVE-2025-59718 and CVE-2025-59719 with a CVSS of 9.8.

The weaknesses affect FortiOS, FortiWeb, FortiProxy and FortiSwitchManager and involve improper verification of cryptographic signatures, enabling attackers to send crafted SAML responses to vulnerable appliances and bypass the FortiCloud SSO login authentication. according to Fortinet, the FortiCloud login feature is disabled by default but becomes enabled when a new device is registered to FortiCare, unless the “Allow administrative login using FortiCloud SSO” toggle is turned off.

The defects are resolved in FortiOS versions 7.6.4, 7.4.9, 7.2.12 and 7.0.18, FortiProxy 7.6.4, 7.4.11, 7.2.15 and 7.0.22, FortiSwitchManager 7.2.7 and 7.0.6, and FortiWeb 8.0.1, 7.6.5 and 7.4.10, while administrators are advised to disable FortiCloud login temporarily until patches are applied.

Fortinet also released patches for three other high-severity vulnerabilities in FortiWeb, FortiSandbox and FortiVoice, with the remainder of fixes covering medium- and low-severity issues across multiple Fortinet products, though Fortinet notes that none of the issues have been shown to be exploited in the wild.