SSO Login Exploits

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Many devices enable FortiCloud SSO during FortiCare registration, creating exposure for unauthenticated logins via crafted SAML messages.