CVE-2026-70468

High8.1Published on August 12, 2026

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-288

Vendorsfortinet

Affected products

Vendors	Product	Versions
fortinet	fortimanager	< 7.2.10
fortinet	fortimanager cloud	< 7.2.10

Vulnerabilities

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager

Fortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.

Aug 17, 202605:095 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager