Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauth…

Multiple Fortinet products including FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability. This flaw allows unauthenticated attackers to bypass FortiCloud SSO login authentication through crafted SAML messages. The vulnerability is classified as high severity and affects critical network security infrastructure. CVE-2025-59719 relates to the same issue and is covered in the same vendor advisory. Organizations should prioritize patching these vulnerabilities due to their potential impact on authentication systems.