CVE-2025-59718

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Fortiproxy

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login…

9. Dez 2025

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-25-647
• Hinweis
  https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-864900.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59718
• CISA
  Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
• NVD
  CVE-2025-59718