Critical · published January 27, 2026
CVSS calls it critical at 9.4. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.
🚨 An authentication bypass at your fingertips! 🎉 If an attacker has a FortiCloud account, they can access devices belonging to others without breaking a sweat. Think of it like a hotel keycard that opens not just your room, but anyone else's on the same floor thanks to a sneaky oversight by the front desk. With FortiCloud SSO enabled, it’s the equivalent of giving someone the master key to a whole set of rooms! This means that an attacker could waltz into other users' devices and potentially access sensitive data or take unauthorized actions. It’s absolutely devastating, as they can compromise or manipulate systems without any legitimate credentials. Immediate action is crucial to safeguard against this risk!
Think of it like a hotel keycard that opens not just your room, but anyone else's on the same floor thanks to a sneaky oversight by the front desk. With FortiCloud SSO enabled, it’s the equivalent of giving someone the master key to a whole set of rooms! This vulnerability allows an attacker with a FortiCloud account to exploit SSO authentication features, letting them log into devices registered to other accounts in Fortinet's ecosystem, creating unauthorized access opportunities.
This means that an attacker could waltz into other users' devices and potentially access sensitive data or take unauthorized actions. It’s absolutely devastating, as they can compromise or manipulate systems without any legitimate credentials. Immediate action is crucial to safeguard against this risk! Update to the latest, patched versions of Fortinet products: FortiAnalyzer (7.6.6+), FortiManager (7.6.6+), FortiNAC-F (7.6.6+), FortiOS (7.6.6+), FortiProxy (7.6.5+), and FortiWeb (8.0.4+). Additionally, consider disabling FortiCloud SSO authentication until all devices are upgraded. 🛡️ You've got this! Take these steps to secure your environment, and you'll be a security hero in no time! 💪✨