cve 2026 24858

Fortinet has confirmed a new, actively exploited authentication‑bypass flaw—tracked as CVE‑2026‑24858—that allows an attacker who controls a FortiCloud account and a registered device to gain administrative access to other Fortinet devices where FortiCloud single sign‑on (SSO) is enabled. This...

CISA has added a critical Fortinet authentication‑bypass bug, tracked as CVE‑2026‑24858, to its Known Exploited Vulnerabilities (KEV) Catalog after evidence that attackers abused FortiCloud Single Sign‑On (SSO) to gain administrative access across accounts — a high‑impact event that federal...