Active Exploitation Of Fortinet SSO Flaw Targets Firewalls For Admin Takeover

Threat actors actively exploit critical Fortinet vulnerabilities CVE-2025-59718 and CVE-2025-59719 to bypass FortiCloud SSO authentication on firewalls and proxies. These flaws allow unauthenticated attackers to craft malicious SAML messages, gaining admin access on internet-exposed devices. Fortinet disclosed them on December 9, 2025, with CVSS scores of 9.8, and CISA added CVE-2025-59718 to its Known Exploited […]

The post Active Exploitation Of Fortinet SSO Flaw Targets Firewalls For Admin Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.