CVE-2025-59719
Critical · 9.8CVSS
9.8
EPSS
29.2%
Published
Dec 9, 2025
CISA due date
—
The record
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63182 LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization… CWE-347
- CVE-2026-46560 Open Access Management (OpenAM) is an access management solution. CWE-347
- CVE-2026-119037 Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a… CWE-347
- CVE-2026-119561 phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in… CWE-347
- CVE-2026-118559 Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe… CWE-347
- CVE-2026-118774 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-347
- CVE-2026-118768 Botan is a C++ cryptography library. CWE-347
- CVE-2026-88078 Improper verification of cryptographic signature in Microsoft Edge (Chromium-based)… CWE-347