{"cvss":9.1,"datePublished":"","dateUpdated":"","description":"Affected: Fortinet / Fortiweb | Description: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message. | Threat actors: unknown | Origin source: CERT-AT | Notes: https://www.cert.at/en/blog/2026/1/threat-actors-use-forticloud-to-collect-ldap-connection-passwords, https://www.cert.at/en/blog/2026/1/look-at-forticloud-sso-bypass-exploitation","dueDate":"","exploited":true,"id":"CVE-2025-59719","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Fortiweb","severity":"CRITICAL","source":"circl_kev","title":"-","vendor":"Fortinet"}