CVE-2025-59718

Severity

Critical 9.1

CVSS 3.1

Exploited

Yes — in CISA KEV

Added Dec 16, 2025

EPSS

0.630

99.1th percentile

Discovered by

Not disclosed

Published

Dec 9, 2025

Assigned by fortinet

Description

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

Weakness: CWE-347

Affected products

Vendor	Product	Category	Matched by
Fortinet	FortiOS	Firewall / NGFW	cna-assigner
Fortinet	FortiProxy	SASE / SSE / Secure Web	cna-assigner
Fortinet	FortiSwitch	Routing & Switching	cna-assigner

Vendor-reported affected versions (4)

Fortinet · FortiSwitchManager
Fortinet · FortiOS
Fortinet · FortiProxy
Siemens · RUGGEDCOM APE1808

Vendor remediation

Upgrade to FortiSwitchManager version 7.2.7 or above Upgrade to FortiSwitchManager version 7.0.6 or above Upgrade to FortiProxy version 7.6.4 or above Upgrade to FortiProxy version 7.4.11 or above Upgrade to FortiProxy version 7.2.15 or above Upgrade to FortiProxy version 7.0.22 or above Upgrade to FortiOS version 7.6.4 or above Upgrade to FortiOS version 7.4.9 or above Upgrade to FortiOS version 7.2.12 or above Upgrade to FortiOS version 7.0.18 or above Upgrade to FortiWeb version 8.0.1 or above Upgrade to FortiWeb version 7.6.5 or above Upgrade to FortiWeb version 7.4.10 or above Fortinet remediated this issue in FortiSASE version 25.3.b and hence customers do not need to perform any action. Upgrade to FortiPAM version 1.8.0 or above

Description

Affected products

Vendor remediation

References