Fortinet Issues Security Advisory for FortiBleed Credential-Harvesting Campaign Affecting 86,000+ Devices

Summary

Fortinet has responded to the FortiBleed campaign, a large-scale credential-harvesting operation targeting Fortinet firewalls and VPNs. The campaign has amassed over 86,000 confirmed working credentials across 194 countries, leveraging credential reuse from prior incidents and brute-force attacks against devices with weak passwords and no multi-factor authentication. The prior incidents include FortiCloud SSO authentication bypass vulnerabilities (CVE-2026-24858, CVE-2025-59718, CVE-2025-59719). Fortinet advises customers to terminate sessions, rotate credentials, enable MFA, upgrade to PBKDF2 hashing, review configurations for unauthorized changes, check logs, and restrict external management.

Source

bskyFortinet Issues Security Advisory for FortiBleed Credential-Harvesting Campaign Affecting 86,000+ Devicesbriefly.co