# CVE-2025-59719

> An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

- **CVSS:** 9.8 (CRITICAL)
- **EPSS:** 0.2%
- **CWE:** CWE-347

Canonical: https://intel.threadlinqs.com/cve/CVE-2025-59719
Full threat coverage + IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp