CVE-2026-24858 Fortinet Multiple Products
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those…
- CVSS
- not scored
On CISA’s exploited list
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Added
- 2026-01-27
- Federal patch deadline
- 2026-01-30
- Ransomware use
- not known