CVE-2026-24858

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortianalyzer

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through…

27. Jan 2026

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-26-060
• Hersteller
  https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-975644.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858
• CISA
  Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
• NVD
  CVE-2026-24858