Hack Forums
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability (/showthread.php?tid=6317274)



Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability - Stanley - Jan 6, 2026

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations.
The vulnerability in question is CVE-2020-12812 (CVSS score: 5.2), an improper authentication vulnerability in SSL VPN in FortiOS that could allow a user to log in successfully without being prompted for the second factor of authentication if the

https://thehackernews.com/2025/12/fortinet-warns-of-active-exploitation.html