Exploited vulnerabilitiesBriefConfirmed by two or more outlets
FortiCloud SSO auth bypass (CVE-2026-24858)
KEV: 27 Jan 2026, federal deadline 30 Jan.
- Disclosed
What happened
- KEV: 27 Jan 2026, federal deadline 30 Jan. Affects FortiOS, FortiManager, FortiAnalyzer, FortiProxy and FortiWeb.
- Related to the covered FortiGate campaign; do not double-count.
Live scores
Live scores
CVE-2026-24858- EPSS
- 0.866
very likely to be attacked soon - VEDAS
- 0.975
strong exploit evidence - On CISA KEV
- Yes, since 2026-01-27
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://thehackernews.com/2026/01/fortinet-patches-cve-2026-24858-after.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-24858
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.