Advisoriesby IbisFortinetCVE-2026-70468
Fortinet FortiManager: authentication bypass
No fix yet
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| FortiManager Product | <= 7.6.1 | No fix yet |
| >= 7.4.3, <= 7.4.5 | No fix yet | |
| >= 7.2.5, <= 7.2.9 | No fix yet | |
| FortiManager Cloud Product | <= 7.6.1 | No fix yet |
| >= 7.4.3, <= 7.4.5 | No fix yet | |
| >= 7.2.5, <= 7.2.9 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-288