Fortinet heeft kwetsbaarheden verholpen in FortiOS, FortiProxy, FortiWeb en FortiSwitchManager. De kwetsbaarheden stellen ongeauthenticeerde aanvallers in staat…

Fortinet has patched multiple vulnerabilities in FortiOS, FortiProxy, FortiWeb and FortiSwitchManager products. The vulnerabilities allow unauthenticated attackers to gain system access through various techniques including bypassing FortiCloud SSO authentication via crafted SAML messages, maintaining active SSLVPN sessions despite password changes, and executing unauthorized operations via forged HTTP/HTTPS requests. Active exploitation of CVE-2025-59718 and CVE-2025-59719 has been observed by researchers, who have published Indicators of Compromise. NCSC recommends immediate patching, implementing mitigation measures, investigating potential compromise using published IoCs, rotating administrator passwords, and closing active administrator sessions after updates.