Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working to fully address a critical FortiCloud SSO authentication bypass vulnerability that should have already been patched since early December.
https://www.bleepingcomputer.com/news/security/fortinet-confirms-critical-forticloud-auth-bypass-not-fully-patched/
BleepingComputer
npub1pk…z6763
2026-01-23 10:39:00 UTC
Author Public Key
npub1pkrnqz97z2wckgmwglckccgg65eanvw3wpvuses7npqlvv6st06svz6763Seen on
wss://relay.momostr.pinkPublished at
2026-01-23 10:39:00 UTCEvent JSON
{
"id": "ea6d8cbaab18f07d48af14977a4e07273651b309a0b5928aa27e24845a31e991",
"pubkey": "0d873008be129d8b236e47f16c6108d533d9b1d17059c8661e9841f633505bf5",
"created_at": 1769164740,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@BleepingComputer/115943980461146845",
"web"
],
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/115943980461146845",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/BleepingComputer/statuses/115943980461146845",
"pink.momostr"
],
[
"-"
]
],
"content": "Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working to fully address a critical FortiCloud SSO authentication bypass vulnerability that should have already been patched since early December.\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-confirms-critical-forticloud-auth-bypass-not-fully-patched/",
"sig": "26e97a05b6ceae2a37e9fef50a57e1c34536fd3daec695c9488d49a8df8fd3a72bbecbf540e5ee57aac0315658ec41fd886a843d434dcf80c0a1ba4e8331685f"
}