


Perceptive Security
SOC/SIEM Consultancy

Fortinet warns of critical FortiCloud SSO login auth bypass flaws
Published:
9 December 2025 at 18:36:48
Alert date:
9 December 2025 at 19:02:08
Source:
bleepingcomputer.com
Fortinet has released security updates to address two critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. These flaws represent a significant security risk as they could enable unauthorized access to Fortinet's cloud-based single sign-on services, potentially compromising multiple connected systems and services.
Technical details
Mitigation steps:
Affected products:
FortiOS
FortiWeb
FortiProxy
FortiSwitchManager
FortiCloud SSO
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
