Fortinet Confirms Ongoing Exploitation of Critical FortiCloud SSO Flaw Despite Patch

Fortinet has confirmed that a critical authentication bypass vulnerability affecting its FortiCloud Single Sign-On (SSO) implementation has not been fully remediated, even on systems that were previously believed to be fully patched. The disclosure follows mounting evidence from customers and security researchers that attackers have continued to successfully compromise FortiGate firewalls well after Fortinet released fixes in early December.