Fortinet has released patches for CVE-2026-24858, an authentication bypass exploited in the wild to compromise devices.

Those hoping for a reprieve following last week's patch pantomime are out of luck. After users reported successful ...

Fortinet released updates for an actively exploited FortiOS SSO authentication bypass flaw, CVE-2026-24858, now listed by CISA in KEV.

Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...

CISA added the flaw to its KEVs catalog as Fortinet warned that patches for most affected versions remain “upcoming,” even though vulnerable devices can no longer use cloud SSO until upgraded.

Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall ...

To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...

Fortinet confirms active exploitation of a FortiCloud SSO authentication bypass affecting fully patched FortiGate devices via ...

CVE-2026-24858 affects dozens of Fortinet products and has already been added to CISA’s list of known exploited ...

A recent Fortinet patch may not work as well as expected ...

Automated infections of potentially fully patched FortiGate devices are allowing threat actors to steal firewall ...