CVE-2025-59718

CRITICAL CISA KEV EPSS 99.2%

Published Dec 9, 20256mo ago · Modified Jun 17, 20261w ago

9.8 CVSS 3.1

Critical

Find Similar

Published Dec 9, 2025 6mo ago

Last Modified Jun 17, 2026 1w ago

KEV Listed Dec 16, 2025 6mo ago

KEV Due Dec 23, 2025 189d overdue

Description

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

CISA Known Exploited Overdue 189d

Added: Dec 16, 2025
Due: Dec 23, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS Exploit Probability

99.2% percentile

Exploit & Patch Status

Actively Exploited (KEV)

No Patch Available

Weaknesses 1

CWE-347

Affected Products 12

Vendor	Product	Version	Range
fortinet	fortiproxy	*	≥7.0.0 – <7.0.22
fortinet	fortiproxy	*	≥7.2.0 – <7.2.15
fortinet	fortiproxy	*	≥7.4.0 – <7.4.11
fortinet	fortiproxy	*	≥7.6.0 – <7.6.4
fortinet	fortiswitchmanager	*	≥7.0.0 – <7.0.6
fortinet	fortiswitchmanager	*	≥7.2.0 – <7.2.7
fortinet	fortios	*	≥7.0.0 – <7.0.18
fortinet	fortios	*	≥7.2.0 – <7.2.12
fortinet	fortios	*	≥7.4.0 – <7.4.9
fortinet	fortios	*	≥7.6.0 – <7.6.4
siemens	ruggedcom_ape1808_firmware	*	any
siemens	ruggedcom_ape1808	*	any

References 4

arcticwolf.com https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/

Third Party Advisory
cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Third Party Advisory
fortiguard.fortinet.com https://fortiguard.fortinet.com/psirt/FG-IR-25-647

Vendor Advisory
cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59718

US Government Resource

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.