authentication-bypass

vulnerabilities January 28, 2026 · 5 min read

Fortinet FortiCloud SSO Authentication Bypass Under Active Exploitation

CVE-2026-24858 lets attackers with any FortiCloud account access other organizations' devices. CISA KEV listed, CVSS 9.4.