Latest Threats

Fortinet FortiCloud SSO Cross-Tenant Authentication Bypass (CVE-2026-24858) — Threadlinqs Intelligence

Two critical FortiCloud SSO authentication bypass vulnerabilities (CVE-2025-59718 / FG-IR-25-647 and CVE-2026-24858 / FG-IR-26-060) allow unauthenticated attackers to bypass FortiCloud Single Sign-On

The FortiCloud SSO authentication bypass represents one of the most dangerous vulnerability classes in modern enterprise security: a CROSS-TENANT identity infrastructure compromise where the centralized authentication system designed to simplify and secure access becomes the universal bypass. **The Identity Infrastructure — FortiCloud SSO:** FortiCloud SSO is Fortinet's centralized cloud-based Single Sign-On service that provides: - Administrative authentication to FortiGate firewalls, FortiProxy, FortiWeb WAFs, FortiManager, FortiAnalyzer, and FortiSwitchManager - SAML-based authentication flow — devices trust FortiCloud as the Identity Provider (IdP) - Auto-enabled upon FortiCare device registration unless administrator explicitly disables the toggle - Cross-product authentication — one FortiCloud account manages devices across the Fortinet product portfolio - Deployed across hundreds of thousands of Fortinet devices worldwide in enterprises, government, and critical infrastructure

VULNERABILITY, CRITICAL

Threadlinqs Intelligence — Real-Time Threat Detection Platform

Latest Threats

🔄 Threat Comparison