CVE-2026-70468

HIGH8.1Published on August 12, 2026

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-288

Fortinet corregge falle critiche in FortiWeb e FortiManager

Vulnerabilities

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager

Fortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.

Aug 17, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager