All vulnerabilities
CVE-2026-24858

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet Multiple ProductsNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.4Critical
ExploitationExploited in the wildAdded to KEV 27 Jan 2026CISA KEV
Exploit odds (EPSS)85.8%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline30 Jan 2026Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 27 Jan 2026Added to CISA KEVCISA KEV
  2. 27 Jan 2026, 19:18 UTCPublishedCVE List

Description

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Text from CVE List

Affected versions 20

  • FortiWebaffected: 8.0.0 through 8.0.3CVE List
  • FortiWebaffected: 7.6.0 through 7.6.6CVE List
  • FortiWebaffected: 7.4.0 through 7.4.11CVE List
  • FortiNAC-Faffected: 7.6.3 through 7.6.5CVE List
  • FortiOSaffected: 7.6.0 through 7.6.5CVE List
  • FortiOSaffected: 7.4.0 through 7.4.10CVE List
  • FortiOSaffected: 7.2.0 through 7.2.12CVE List
  • FortiOSaffected: 7.0.0 through 7.0.18CVE List
  • FortiAnalyzeraffected: 7.6.0 through 7.6.5CVE List
  • FortiAnalyzeraffected: 7.4.0 through 7.4.9CVE List
  • FortiAnalyzeraffected: 7.2.0 through 7.2.11CVE List
  • FortiAnalyzeraffected: 7.0.0 through 7.0.15CVE List
  • FortiProxyaffected: 7.6.0 through 7.6.4CVE List
  • FortiProxyaffected: 7.4.0 through 7.4.12CVE List
  • FortiProxyaffected: 7.2.0 through 7.2.15CVE List
  • FortiProxyaffected: 7.0.0 through 7.0.22CVE List
  • FortiManageraffected: 7.6.0 through 7.6.5CVE List
  • FortiManageraffected: 7.4.0 through 7.4.9CVE List
  • FortiManageraffected: 7.2.0 through 7.2.11CVE List
  • FortiManageraffected: 7.0.0 through 7.0.15CVE List

References 5