Tag: FortiOS

Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: FortiCloud SSO exploitation

Cybersecurity Threat Advisory: FortiCloud SSO exploitation

Threat actors are actively exploiting CVE‑2026‑24858 to log into FortiOS and other Fortinet products via FortiCloud SSO (when enabled), create persistent local admin accounts, and steal device configuration files. Review the Cybersecurity Threat Advisory now to protect you and your...

/ March 18, 2026
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: FortiOS CLI command bypass vulnerability

Cybersecurity Threat Advisory: FortiOS CLI command bypass vulnerability

Fortinet has disclosed a high-severity vulnerability in FortiOS, identified as CVE-2025-58325, which has a CVSS score of 7.8. This flaw could allow local authenticated attackers to execute arbitrary system commands. The vulnerability stems from improper input validation in the FortiOS...

/ October 20, 2025
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Fortinet authentication bypass vulnerability

Cybersecurity Threat Advisory: Fortinet authentication bypass vulnerability

A critical vulnerability was identified in Fortinet’s FortiProxy, FortiSwitchManager, and FortiOS products. This vulnerability, CVE-2025-22252, enables an attacker who possess knowledge of an existing administrative account to bypass authentication and gain unauthorized access to the device as a valid administrator....

/ June 4, 2025
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Fortinet authentication vulnerability

Cybersecurity Threat Advisory: Fortinet authentication vulnerability

A critical Fortinet authentication bypass vulnerability, CVE-2024-55591, is actively exploited in the wild. This vulnerability impacts FortiOS and FortiProxy, with a CVSS score of 9.6. Continue reading this Cybersecurity Threat Advisory to learn the necessary steps to protect your environment....

/ January 27, 2025