Fortinet FortiOS SSO Authentication Bypass (CVE-2026-24858) Actively Exploited

Authentication bypass in FortiOS SSO actively exploited. Attackers create local admin accounts, modify VPN configurations, and exfiltrate firewall configs. Added to CISA KEV catalog.

**Associated CVEs:** CVE-2026-24858

**Source:** https://thehackernews.com/2026/01/fortinet-patches-cve-2026-24858-after.html

**Recommended Actions:** - Apply security patches immediately if available - Monitor for indicators of compromise - Review and update security configurations - Implement network segmentation where applicable