by Kastro
Paper/Archive/CVE-2025-59718

CVE-2025-59718

Fortinet FortiSwitchManager — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

KEV · due 23 DecEPSS 68%public exploitSSVC actCVSS 9.1
critical.is priorityof 100
97
CVSS 9.1 (CNA)9.1 / 10 × 3027.3In CISA KEV+3030.0EPSS percentile 99.3.993 × 2019.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

Affected

ProductAffectedFixed inSource
FortiSwitchManager7.2.0 – 7.2.6–CNA
FortiSwitchManager7.0.0 – 7.0.5–CNA
FortiOS7.6.0 – 7.6.3–CNA
FortiOS7.4.0 – 7.4.8–CNA
FortiOS7.2.0 – 7.2.11–CNA
FortiOS7.0.0 – 7.0.17–CNA
FortiProxy7.6.0 – 7.6.3–CNA
FortiProxy7.4.0 – 7.4.10–CNA
FortiProxy7.2.0 – 7.2.14–CNA
FortiProxy7.0.0 – 7.0.21–CNA
RUGGEDCOM APE1808all versions–siemens-SADP

Scores by source

fortinet (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-647writeuparcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59718refcert-portal.siemens.com/productcert/html/ssa-864900.htmlkevcisa.gov/known-exploited-vulnerabilities-catalog