Skip to content

CVE

CVE-2025-59719

9.8
CVSS 3.1
2
stories
Severity
9.8 Critical · vendor score
Published
Dec 9, 2025
Weakness
CWE-347
Part of FortiCloud SSO Authentication Bypass →

What it is

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

From the National Vulnerability Database

Decipher coverage · 2 stories

Newest first ↑
  1. IntrusionsFortinet FortiGate Devices Targeted in New CampaignThis activity shares some similarities with a campaign that researchers at Arctic Wolf identified in December. That campaign started soon after Fortinet disclosed two authentication bypass flaws (CVE-2025-59718 and CVE-2025-59719).DENNIS FISHER · 3 MIN
  2. VulnerabilitiesFortinet Warns of Critical Flaw After FortiCloud SSO ExploitationFortinet is rolling out updates for CVE-2026-24858, with fixes for some versions available as of Tuesday, and others in releases that are upcoming at an unspecified date.DECIPHER · 2 MIN

Official references

3 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record

Advisories, fixes & analysis

Vendor advisoryfortiguard.fortinet.com/psirt/FG-IR-25-647