The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.15Upgrade FortiProxy to 7.4.11Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.6.4Upgrade FortiProxy to 7.0.22 | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.7Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.6 | Sep 30, 2026 | Dec 9, 2025 |
| Fortinet Fortiweb | — | Upgrade FortiWeb to 7.6.5Upgrade FortiWeb to 8.0.1Upgrade FortiWeb to 7.4.10 | Jun 30, 2026 | Dec 9, 2025 |
| Fortios | — | Upgrade FortiOS to 7.4.9Upgrade FortiOS to 7.0.18Upgrade FortiOS to 7.6.4Upgrade FortiOS to 7.2.12 | Jul 2, 2026 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub