CVE-2026-24858

# CVE-2026-24858: Fortinet FortiCloud SSO Authentication Bypass An authentication bypass in Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy allows attackers with any valid FortiCloud account to authenticate as administrators on other organizations' devices if FortiCloud single sign-on (SSO) is enabled. An attacker registers a device to their own FortiCloud account, then exploits the SSO mechanism to gain unauthorized access to unrelated devices belonging to other FortiCloud accounts. **Immediate actions:** Disable FortiCloud SSO authentication until Fortinet releases and deploys a patch, or restrict FortiCloud SSO access to trusted identity providers with additional MFA enforcement. Audit FortiCloud authentication logs for cross-account login attempts and review administrative access on all affected appliances for unauthorized sessions.