FortinetCVE-2026-70466
Fortinet FortiWeb: improper access control
Medium5.3CVE-2026-70466 · Published Aug 12, 2026 · updated Sep 8, 2026
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| FortiOS Product | >= 7.6.0, <= 7.6.7 | No fix yet |
| >= 7.4.0, <= 7.4.11 | No fix yet | |
| >= 7.2.0, <= 7.2.13 | No fix yet | |
| >= 7.0.0, <= 7.0.19 | No fix yet | |
| FortiWeb Product | >= 8.0.0, <= 8.0.2 | No fix yet |
| >= 7.6.0, <= 7.6.5 | No fix yet | |
| >= 7.4.0, <= 7.4.13 | No fix yet | |
| >= 7.2.0, <= 7.2.13 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-184
More Fortinet advisories
All Fortinet| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 12 | Fortinet FortiSIEM: server-side request forgery | Low3.8 | No fix yet |
| Aug 12 | Fortinet FortiManager: authentication bypass | High8.1 | No fix yet |
| Aug 12 | Fortinet FortiOS: stack buffer overflow | Medium5.6 | No fix yet |
| Aug 12 | Fortinet FortiOS: denial of service | Medium5.3 | No fix yet |
| Aug 12 | Fortinet FortiWeb: improper authentication | Critical9.8 | No fix yet |
| Aug 12 | Fortinet FortiClientWindows: buffer overflow | High8.1 | No fix yet |