AL26-014 – FortiBleed leak of thousands of compromised credentials impacting Fortinet devices

The Canadian Centre for Cyber Security Alert AL26-014 (June 18, 2026) warns of a widespread "FortiBleed" campaign exposing credentials on Fortinet firewalls and VPN gateways. Exploitation can allow remote access, elevated privileges, and changes to critical security settings; the alert urges organizations to inventory and remove suspicious accounts, terminate sessions, reset passwords, enforce MFA, restrict management interfaces, and apply firmware patches addressing CVE-2024-55591 and CVE-2025-59718/59719.