CVE-2026-70468
Full vulnerability record from the local CVENow database.
Description
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Severity
HIGH
CVSS score
8.1
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-12 13:17:25.227000
Last modified
2026-10-24 15:10:00.190000
View original CVE JSON
{
"id": "CVE-2026-70468",
"sourceIdentifier": "[email protected]",
"published": "2026-08-12T13:17:25.227",
"lastModified": "2026-10-24T15:10:00.190",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>"
},
{
"lang": "es",
"value": "Una vulnerabilidad de omisión de autenticación utilizando una ruta o canal alternativo en Fortinet FortiManager 7.6.1, FortiManager 7.4.3 a 7.4.5, FortiManager 7.2.5 a 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 a 7.4.5, FortiManager Cloud 7.2.5 a 7.2.9 puede permitir al atacante un control de acceso inadecuado a través de menor queinsertar vector de ataque aquímayor que"
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Fortinet",
"product": "FortiManager",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.6.1",
"status": "affected"
},
{
"version": "7.4.3",
"lessThanOrEqual": "7.4.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.2.5",
"lessThanOrEqual": "7.2.9",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiManager Cloud",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.6.1",
"status": "affected"
},
{
"version": "7.4.3",
"lessThanOrEqual": "7.4.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.2.5",
"lessThanOrEqual": "7.2.9",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-12T00:00:00+00:00",
"id": "CVE-2026-70468",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-288"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndExcluding": "7.2.10",
"matchCriteriaId": "88F5C2ED-4F65-4579-8227-29FB64422C42"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.4.3",
"versionEndExcluding": "7.4.6",
"matchCriteriaId": "0E642AB7-A2B0-4E38-9C34-B918F041D4D3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E4EB37D1-158E-4C19-966E-328980CF5DC6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndExcluding": "7.2.10",
"matchCriteriaId": "6F00D039-7104-446D-BB6D-F8A9E90FD8D4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.4.3",
"versionEndIncluding": "7.4.6",
"matchCriteriaId": "EFEA33E6-7AAD-4C5B-BA4C-8D783526EF87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:7.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F144EF3A-25C4-4AAF-B45B-985C6E1A6A7A"
}
]
}
]
}
],
"references": [
{
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-160",
"source": "[email protected]",
"tags": [
"Vendor Advisory",
"Mitigation"
]
}
]
}