Description
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWeb | 8.0.0, 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.9 | — |
Advisories 4
- SSA-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Oct 13, 2026
- ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · Jul 9, 2026
- NCSC-2025-0386 Kwetsbaarheden verholpen in Fortinet producten NCSC-NL (Netherlands) · Jan 28, 2026
- WID-SEC-2025-2795 Fortinet FortiOS, FortiProxy, FortiSwitch und FortiWeb: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jan 22, 2026