FortiCloud SSO SAML Authentication Bypass Attempt - Unsigned Assertion (CVE-2026-24858)

Arnold Chan@slaz

•updated Sep 15, 2026•0•0•4

Detects an attempt to exploit CVE-2026-24858 in FortiCloud SSO by sending a crafted SAML authentication request that lacks a signature. This vulnerability allows an attacker to bypass authentication by providing an unsigned SAML response.