Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
FortinetMultiple Products
- Exploited in the wild
- In CISA KEV since 27 Jan
- Vendor fix available
Passed 267 days ago
CISA KEV · added 27 Jan
Higher than 100% of scored CVEs
Description NVD
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 9 articles · 6 outlets
See the full timelineShow as table
- Siemens RUGGEDCOM APE1808 DevicesCISA · official notice · mentions it in passing
- Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code ExecutionThe Hacker News · mentions it in passing
- Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs
- Fortinet Confirms New Zero-Day Behind Malicious SSO LoginsDark Reading
- U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalogSecurity Affairs
- Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)Security Affairs
- Fortinet Patches Exploited FortiCloud SSO Authentication BypassSecurityWeek
- Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation DetectedThe Hacker News
- Under Attack: Critical Fortinet Auth Bypass (CVE-2026-24858) Exploited in the WildSecurityOnline · first in our coverage