Vulnerability details
CVE-2026-24858
Actively exploitedOfficial description
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.4Critical | 3.1 | CVEProject cvelistV5 (CNA) (fortinet) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Fortinet | FortiAnalyzer | 7.0.0 ≤ v ≤ 7.0.15 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiAnalyzer | 7.2.0 ≤ v ≤ 7.2.11 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiAnalyzer | 7.4.0 ≤ v ≤ 7.4.9 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiAnalyzer | 7.6.0 ≤ v ≤ 7.6.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiManager | 7.0.0 ≤ v ≤ 7.0.15 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiManager | 7.2.0 ≤ v ≤ 7.2.11 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiManager | 7.4.0 ≤ v ≤ 7.4.9 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiManager | 7.6.0 ≤ v ≤ 7.6.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiNAC-F | 7.6.3 ≤ v ≤ 7.6.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.0.0 ≤ v ≤ 7.0.18 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.2.0 ≤ v ≤ 7.2.12 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.4.0 ≤ v ≤ 7.4.10 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.6.0 ≤ v ≤ 7.6.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.0.0 ≤ v ≤ 7.0.22 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.2.0 ≤ v ≤ 7.2.15 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.4.0 ≤ v ≤ 7.4.12 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.6.0 ≤ v ≤ 7.6.4 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiWeb | 7.4.0 ≤ v ≤ 7.4.11 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiWeb | 7.6.0 ≤ v ≤ 7.6.6 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiWeb | 8.0.0 ≤ v ≤ 8.0.3 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM APE1808 | All | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://fortiguard.fortinet.com/psirt/FG-IR-26-060
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858 government-resource
- https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios vendor-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-975644.html
Details
- Published
- 2026-01-27
- Last updated
- 2026-06-09
- State
- Published
- Assigner (CNA)
- fortinet
- Kolun priority
- 89 · Critical
CISA KEV catalog
- Date added
- 2026-01-27
- Due date
- 2026-01-30
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-288Improper access control