Not scored
CVE-2025-59719
Fortinet FortiWeb vulnerability
FortinetFortiWeb
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
29%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
Coverage 8 articles · 5 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 22 Jan · 11:20 UTC | Security Affairs | Arctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacks |
| Thu 22 Jan · 12:25 UTC | SecurityWeek | New Wave of Attacks Targeting FortiGate Firewalls |
| Thu 22 Jan · 21:41 UTC | Dark Reading | Fortinet Firewalls Hit With Malicious Configuration Changes |
| Fri 23 Jan · 05:20 UTC | SecurityOnline | “New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits |
| Fri 23 Jan · 13:31 UTC | The Hacker News | Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls |
| Fri 23 Jan · 14:06 UTC | SecurityWeek | Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices |
| Fri 23 Jan · 19:16 UTC | Security Affairs | Fortinet warns of active FortiCloud SSO bypass affecting updated devices |
| Mon 26 Jan · 13:11 UTC | The Hacker News | ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More |
- ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & MoreThe Hacker News · mentions it in passing
- Fortinet warns of active FortiCloud SSO bypass affecting updated devicesSecurity Affairs · mentions it in passing
- Fortinet Confirms FortiCloud SSO Exploitation Against Patched DevicesSecurityWeek · mentions it in passing
- Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate FirewallsThe Hacker News · mentions it in passing
- “New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO ExploitsSecurityOnline · mentions it in passing
- Fortinet Firewalls Hit With Malicious Configuration ChangesDark Reading · mentions it in passing
- New Wave of Attacks Targeting FortiGate FirewallsSecurityWeek · mentions it in passing
- Arctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacksSecurity Affairs · first in our coverage · mentions it in passing