Yüksek CVSS 8.1
CVE-2026-70468: Fortimanager: kimlik doğrulama atlatma
Açıklama (NVD)
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Özet bilgiler
- Ürün
- Fortinet Fortimanager
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,46 (yüzdelik 40)
- CWE
- CWE-288
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortimanager | 7.2.5 | — | 7.2.10 |
| fortinet-fortimanager | 7.4.3 | — | 7.4.6 |
| fortinet-fortimanager | 7.6.1 | 7.6.1 | — |
| fortinet-fortimanager-cloud | 7.2.5 | — | 7.2.10 |
| fortinet-fortimanager-cloud | 7.4.3 | 7.4.6 | — |
| fortinet-fortimanager-cloud | 7.6.1 | 7.6.1 | — |