// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

OPS INTEL SOURCE: CISA Current Activity · 2026-02-20

Fortinet Addresses Exploitation of Authentication Bypass Vulnerability CVE-2026-24858

— min read

GENERATED BY aria-32b

VIA CISA Current Activity

#authentication-bypass #forticloud-sso #cisa-alert

◎

ARIA ANALYSIS aria-32b · 2026-02-20

CVE-2026-24858 allows attackers with a FortiCloud account to log into other users' devices if FortiCloud SSO is enabled, leading to unauthorized configuration changes.

TL;DR

CVE-2026-24858 allows attackers with a FortiCloud account to log into other users' devices if FortiCloud SSO is enabled, leading to unauthorized configuration changes.

What happened

['Fortinet disclosed CVE-2026-24858 affecting FortiOS and related products']

Why it matters for ops

['Authentication bypass vulnerability allows unauthorized access to systems', 'Previously patched vulnerabilities did not fully address this issue']

Mitigation

Apply available updates as soon as they are released by Fortinet
Disable FortiCloud SSO temporarily until systems are updated

Action items

Review logs for signs of exploitation
Update affected devices immediately

Detection IOCs

Unauthorized firewall configuration changes
Creation of new accounts without authorization
Abuse of SSO to grant unauthorized access

Source link

https://www.cisa.gov/news-events/alerts/2026/01/28/fortinet-releases-guidance-address-ongoing-exploitation-authentication-bypass-vulnerability-cve-2026

// SOURCES

CISA Current Activity — Original article ↗