A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.22Upgrade FortiProxy to 7.6.4Upgrade FortiProxy to 7.4.11Upgrade FortiProxy to 7.2.15Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.6Upgrade FortiSwitchManager to 7.2.7 | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiweb | — | Upgrade FortiWeb to 8.0.1Upgrade FortiWeb to 7.4.10Upgrade FortiWeb to 7.6.5 | Jun 30, 2026 | Dec 9, 2025 |
| Fortios | — | Upgrade FortiOS to 7.2.12Upgrade FortiOS to 7.6.4Upgrade FortiOS to 7.4.9Upgrade FortiOS to 7.0.18 | Dec 17, 2025 | Dec 9, 2025 |
| Fortiproxy | — | Upgrade to the latest version of Fortinet FortiProxy | Dec 17, 2025 | Dec 9, 2025 |
| Fortiswitch Manager | — | — | Dec 18, 2025 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub