CVE-2026-70468CWE-288

CVE-2026-70468

High · published August 12, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-08-12T17:17Z
Affected products (6)
ProductVersionsFixed in
fortinet/fortimanager≥ 7.2.5, < 7.2.107.2.10
fortinet/fortimanager≥ 7.4.3, < 7.4.67.4.6
fortinet/fortimanagerall versions—
fortinet/fortimanager_cloud≥ 7.2.5, < 7.2.107.2.10
fortinet/fortimanager_cloud≥ 7.4.3, ≤ 7.4.6—
fortinet/fortimanager_cloudall versions—
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-26-160 · [email protected]
EPSS history
Timeline
  • 12 AUG 12:19Z
    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…
    cvelistv5