Fortinet admits FortiGate SSO bug still exploitable despite December patch
23 January 2026 at 13:43
Fix didn't quite do the job β attackers spotted logging in
Fortinet has confirmed that attackers are actively bypassing a December patch for a critical FortiCloud single sign-on (SSO) authentication flaw after customers reported suspicious logins on devices supposedly fully up to date.β¦