An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.6.4Upgrade FortiProxy to 7.0.22Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.4.11Upgrade FortiProxy to 7.2.15 | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.0.6Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.2.7 | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiweb | — | Upgrade FortiWeb to 8.0.1Upgrade FortiWeb to 7.4.10Upgrade FortiWeb to 7.6.5 | Jun 30, 2026 | Dec 9, 2025 |
| Fortios | — | Upgrade FortiOS to 7.0.18Upgrade FortiOS to 7.2.12Upgrade FortiOS to 7.6.4Upgrade FortiOS to 7.4.9 | Jul 2, 2026 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub