Log in Start free

Actively exploited · Published Dec 9, 2025 · Assigned by fortinet

CVE-2025-59718

Critical 9.1 Exploited

In plain English

A critical-severity security flaw in FortiOS from Fortinet. Attackers are actively exploiting it in the wild (listed by CISA on December 16, 2025). The chance it is exploited in the next 30 days is estimated at 68.3% (higher than 99.3% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)68.3%top 0.7% of all CVEs
Exploited in the wildYesCISA KEV since Dec 16, 2025
Attack tooling1Public PoC

CISA guidance

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Dec 23, 2025.

Official description

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

Affected products (as reported)

VendorProductVersions
Fortinet FortiSwitchManager 7.2.0 – through 7.2.67.0.0 – through 7.0.5
Fortinet FortiOS 7.6.0 – through 7.6.37.4.0 – through 7.4.87.2.0 – through 7.2.117.0.0 – through 7.0.17
Fortinet FortiProxy 7.6.0 – through 7.6.37.4.0 – through 7.4.107.2.0 – through 7.2.147.0.0 – through 7.0.21

Weakness: CWE-347 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

References