Live › vulnerability › CVE-2025-59718
Go to dashboardFortinet FortiOS, FortiSwitchManager, FortiProxy and FortiWeb accept forged SAML messages for FortiCloud SSO login, so the signature check is not enforced. An unauthenticated attacker can log in as an administrator without credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Fortinet Multiple Products | vendor | – | – |
| fortinet fortiproxy | vendor | >= 7.0.0, < 7.0.22 | 7.0.22 |
| fortinet fortiproxy | vendor | >= 7.2.0, < 7.2.15 | 7.2.15 |
| fortinet fortiproxy | vendor | >= 7.4.0, < 7.4.11 | 7.4.11 |
| fortinet fortiproxy | vendor | >= 7.6.0, < 7.6.4 | 7.6.4 |
| fortinet fortiswitchmanager |
| vendor |
| >= 7.0.0, < 7.0.6 |
| 7.0.6 |
| fortinet fortiswitchmanager | vendor | >= 7.2.0, < 7.2.7 | 7.2.7 |
| fortinet fortios | vendor | >= 7.0.0, < 7.0.18 | 7.0.18 |
| fortinet fortios | vendor | >= 7.2.0, < 7.2.12 | 7.2.12 |
| fortinet fortios | vendor | >= 7.4.0, < 7.4.9 | 7.4.9 |
| fortinet fortios | vendor | >= 7.6.0, < 7.6.4 | 7.6.4 |
| siemens ruggedcom ape1808 firmware | vendor | – | – |
What vendors did on their customers’ behalf. Holds only for traffic through them; patching is still the fix.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
WAF Release - 2026-03-30 · Changelog
New updates and improvements at Cloudflare.
March 30, 2026
This week's release introduces new detections for a critical authentication bypass vulnerability in Fortinet products (CVE-2025-59718), alongside three new generic detection rules designed to identify and block HTTP Parameter Pollution attempts. Additionally, this release includes targeted protection for a high-impact unrestricted file upload vulnerability in Magento and Adobe Commerce.
Key Findings
Impact
Successful exploitation of the Fortinet and Magento vulnerabilities could allow unauthenticated attackers to gain administrative control or deploy webshells, leading to complete server compromise and data theft.
| Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments |
|---|---|---|---|---|---|---|
| Cloudflare Managed Ruleset | ...2f7f95e9 | N/A | Generic Rules - Parameter Pollution - Body | Log | Disabled | This is a new detection. |
| Cloudflare Managed Ruleset | ...319731a4 | N/A | Generic Rules - Parameter Pollution - Header - Form | Log | Disabled | This is a new detection. |
| Cloudflare Managed Ruleset | ...def262dd | N/A | Generic Rules - Parameter Pollution - URI | Log | Disabled | This is a new detection. |
| Cloudflare Managed Ruleset | ...70a36147 | N/A | Magento 2 - Unrestricted file upload | Log | Block | This is a new detection. |
| Cloudflare Managed Ruleset | ...2ffcca9f | N/A | Fortinet FortiCloud SSO - Authentication Bypass - CVE:CVE-2025-59718 | Log |
This page as .md · .json · in your agent: get_signal("CVE-2025-59718")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
| Block |
| This is a new detection. |