CVE-2025-59718

This repository contains a functional proof-of-concept exploit for CVE-2025-59718, an authentication bypass vulnerability in Fortinet products due to improper SAML signature verification. The exploit crafts unsigned SAML responses to gain administrative access and includes features for bulk scanning, proxy support, and post-authentication actions.

This repository contains a functional Python exploit for CVE-2025-59718, an authentication bypass vulnerability in Fortinet products (FortiOS, FortiProxy, FortiSwitchManager) due to improper SAML signature verification. The exploit crafts unsigned SAML responses to gain administrative access and supports features like multi-threading, proxy usage, and post-authentication actions.

This repository contains a Python-based scanner for detecting vulnerabilities CVE-2025-59718 and CVE-2025-59719 in Fortinet devices (FortiOS, FortiProxy, FortiSwitchManager, FortiWeb). It supports passive fingerprinting, active non-destructive tests, and authenticated SSH checks.