Skip to content
VulniPulse
Sign in
Highest advisory severityCritical Exploited CISA KEV 1 vendor · 2 advisories

CVE-2025-59718

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

CVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability. In CISA KEV since 2025-12-16.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

CVE-2025-59718 at a glance

CISA KEV
Listed on · federal remediation due
Highest advisory severity
Critical
Vendor advisories
2 from Fortinet
VulniPulse record
Published · Updated

Is CVE-2025-59718 exploited?

Yes. CISA lists CVE-2025-59718 in its Known Exploited Vulnerabilities catalog (added ), which means CISA has evidence of exploitation in the wild.

How do I fix CVE-2025-59718?

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

This CVE is tracked through a multi-CVE bulletin, so its fixed releases may differ from the bulletin-wide values below. Check the vendor source.

Vendor advisory comparison

Fortinet

2 advisories
  • Advisory severityCritical9.8

    Critical [CVE-2025-59718 +1] FortiOS: improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4…

    CVE-2025-59719Source published Source updated

    This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message. Affected products named by the advisory: FortiOS; FortiProxy. Affected products named by the advisory: FortiSwitchManager.

    Affected products in this advisory
    • FortiOS
    • FortiProxy
    • FortiSwitchManager
    • FortiWeb
    Source-reported affected versions
    • FortiOS: 7.0.0 through 7.6.3 (vendor-listed versions)
    • FortiProxy: 7.0.0 through 7.6.3 (vendor-listed versions)
    • FortiSwitchManager: 7.0.0 through 7.2.6 (vendor-listed versions)
    • FortiWeb: 7.4.0 through 8.0.0 (vendor-listed versions)
    Source-reported fixed versions
    • FortiOS 7.6: 7.6.4
    • FortiOS 7.4: 7.4.9
    • FortiOS 7.2: 7.2.12
    • FortiOS 7.0: 7.0.18

    9 more entries in the full advisory.

    Mitigation guidance
    • Upgrade per the Affected/Solution table: FortiOS 7.6: 7.6.4; FortiOS 7.4: 7.4.9; FortiOS 7.2: 7.2.12; FortiOS 7.0: 7.0.18; FortiProxy 7.6: 7.6.4; ….
    Workarounds
    • To prevent being affected by this vulnerability on vulnerableversions, please turn off the FortiCloud login feature (if enabled) temporarily untilupgrading to a non-affected version.To turn off FortiCloud login, go to System -> Settings -> Switch"Allow administrative login using FortiCloud SSO" to Off.
    • Or type thefollowing command in the CLI:
    • config system global set admin-forticloud-sso-login disableend
    Full advisory and evidenceOpen source bulletin
  • Advisory severityCritical9.8

    Critical [CVE-2025-59718 +1] improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through…

    CVE-2025-59718Source published Source updated

    This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message. Affected products named by the advisory: FortiWeb.

    Affected products in this advisory
    • FortiOS
    • FortiProxy
    • FortiSwitchManager
    • FortiWeb
    Source-reported affected versions
    • FortiOS: 7.0.0 through 7.6.3 (vendor-listed versions)
    • FortiProxy: 7.0.0 through 7.6.3 (vendor-listed versions)
    • FortiSwitchManager: 7.0.0 through 7.2.6 (vendor-listed versions)
    • FortiWeb: 7.4.0 through 8.0.0 (vendor-listed versions)
    Source-reported fixed versions
    • FortiOS 7.6: 7.6.4
    • FortiOS 7.4: 7.4.9
    • FortiOS 7.2: 7.2.12
    • FortiOS 7.0: 7.0.18

    9 more entries in the full advisory.

    Mitigation guidance
    • Upgrade per the Affected/Solution table: FortiOS 7.6: 7.6.4; FortiOS 7.4: 7.4.9; FortiOS 7.2: 7.2.12; FortiOS 7.0: 7.0.18; FortiProxy 7.6: 7.6.4; ….
    Workarounds
    • To prevent being affected by this vulnerability on vulnerableversions, please turn off the FortiCloud login feature (if enabled) temporarily untilupgrading to a non-affected version.To turn off FortiCloud login, go to System -> Settings -> Switch"Allow administrative login using FortiCloud SSO" to Off.
    • Or type thefollowing command in the CLI:
    • config system global set admin-forticloud-sso-login disableend
    Full advisory and evidenceOpen source bulletin

Browse the latest tracked CVEs or the CVEs listed in CISA KEV.

Android app · Google Play

Monitor future Fortinet CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features