VDB
NCSC-2025-0386
NCSC-2025-0386
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Fortinet heeft kwetsbaarheden verholpen in FortiOS, FortiProxy, FortiWeb en FortiSwitchManager.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| vers:unknown/* |
Timeline
- Dec 10, 2025 CVE Published
- Jan 28, 2026 CVE Updated
References
- https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/ url
- https://fortiguard.fortinet.com/psirt/FG-IR-25-647 url
- https://fortiguard.fortinet.com/psirt/FG-IR-25-945 url
- https://www.cert.at/en/blog/2026/1/look-at-forticloud-sso-bypass-exploitation url
- https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios url
- https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-configuration-changes-fortinet-fortigate-devices-via-sso-accounts/ url
- https://fortiguard.fortinet.com/psirt/FG-IR-24-268 url
- https://fortiguard.fortinet.com/psirt/FG-IR-25-411 url
- https://fortiguard.fortinet.com/psirt/FG-IR-25-984 url