Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2025-59719

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

  • Published: Dec 9, 2025
  • Updated: Dec 10, 2025
  • CVE: CVE-2025-59719
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortiweb 7.4.0 7.4.9.x
fortinet / fortiweb 7.6.0 7.6.4.x
fortinet / fortiweb 8.0.0 8.0.0.x