As cited
Copy frozen at (site build).
vulnerabilities
Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls
Fortinet FortiGate firewalls are being actively exploited through CVE-2025-59718, a vulnerability that was inadequately patched in previous updates. Attackers are bypassing SSO authentication using generic usernames, provisioning administrative accounts, and exfiltrating device configurations. Fortinet has acknowledged the new exploitation method to select customers via private communications.
Why it matters: Organizations running vulnerable FortiGate instances should immediately verify patch status and monitor for unauthorized admin accounts and SSO bypass attempts, as public exploitation is ongoing.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls
Fortinet FortiGate firewalls are being actively exploited through CVE-2025-59718, a vulnerability that was inadequately patched in previous updates. Attackers are bypassing SSO authentication using generic usernames, provisioning administrative accounts, and exfiltrating device configurations. Fortinet has acknowledged the new exploitation method to select customers via private communications.
Why it matters: Organizations running vulnerable FortiGate instances should immediately verify patch status and monitor for unauthorized admin accounts and SSO bypass attempts, as public exploitation is ongoing.
- Source published
- First seen by Cybersecurity Tracker