The flaw, tracked as CVE-2026-24858, allows an attacker with a registered device and a FortiCloud account to access devices ...
To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...
Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...
Fortinet has released patches for CVE-2026-24858, an authentication bypass exploited in the wild to compromise devices.
More work for admins on the cards as they await a full dump of fixes Things aren't over yet for Fortinet customers – the ...
Attackers have been targeting various Fortinet products for some time. A functional security update is still missing.
Managing digital identities for both human and non-human users is a central challenge for modern organizations. As companies ...
CISA added the flaw to its KEVs catalog as Fortinet warned that patches for most affected versions remain “upcoming,” even ...
All SAML SSO implementations, including FortiCloud SSO, are vulnerable to authentication bypass and malicious configuration ...