← All Advisories

Fortinet FortiManager's Authentication Bypass via an Alternate Path Grants Unauthenticated Attackers Access to Management Functions

Last refreshed2026-09-27

Status: UPDATED  |  Advisory ID: CVE-2026-70468

Key Details

CVECVE-2026-70468
CVSS Score / Version8.1 (High) / CVSS v3.1
Updated2026-09-20
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Proseattack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected productsFortinet FortiManager and Fortinet FortiManager Cloud
Classified asCWE-288 (Authentication Bypass Using an Alternate Path or Channel)
Exploitation prediction (EPSS)0.46% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
FortinetFortiManager
FortinetFortiManager Cloud
SubsystemsGeneral OT
SectorsMulti-sector

What to Know

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

What to Do

Monitor Fortinet's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70468
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70468
Vendor advisoryhttps://fortiguard.fortinet.com/psirt/FG-IR-26-160