References https://www.fortiguard.com/psirt/FG-IR-26-060 https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios https://www.rapid7.com/blog/post/etr-critical-vulnerabilities-in-fortinet-cve-2025-59718-cve-2025-59719-exploited-in-the-wild/ https://nvd.nist.gov/vuln/detail/CVE-2026-24858 https://www.fortiguard.com/psirt/FG-IR-24-423 https://nvd.nist.gov/vuln/detail/CVE-2024-47575 https://www.cisa.gov/news-events/alerts/2024/10/30/fortinet-updates-guidance-and-indicators-compromise-following-fortimanager-vulnerability https://www.secrss.com/articles/87399 https://www.runzero.com/blog/fortinet-assets/ https://www.aqtd.com/nd.jsp?id=7659&groupId=-1 https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/FortiManager/FortiManager%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E(CVE-2024-47575).md https://www.cybersecuritydive.com/news/fortinet-zero-day-attack-spree/730894/ https://www.cve.org/CVERecord?id=CVE-2026-24858
Related VulnerabilitiesPoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)Fortinet FortiWeb 需授权 命令注入漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)PoCFortinet FortiWeb 未授权身份验证绕过漏洞(CVE-2025-64446)