EXECUTIVE SUMMARY
Active exploitation of a FortiOS SSL VPN vulnerability enables attackers to bypass 2FA and gain unauthorized access to affected systems. Organizations using impacted FortiOS versions are at increased risk of credential abuse, lateral movement, and compromise of critical network resources.
- CVE ID: CVE-2020-12812
- Active Region: Global
- Affected Sector: Any sector using FortiGate VPN infrastructure
- Affected Product: FortiOS SSL VPN
- Severity: High
- Published Date: December 25, 2025
AFFECTED VERSIONS
- FortiOS 6.0.9 and earlier
- FortiOS 6.2.0 through
- FortiOS……



