---
id: "CVE-2024-47575"
kind: "vulnerability"
aliases: ["CVE-2024-47575"]
title: "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "fortinet fortimanager", "fixed": ["6.2.13"], "affected": ">= 6.2.0, < 6.2.13", "ecosystem": "vendor"}, {"name": "fortinet fortimanager", "fixed": ["6.4.15"], "affected": ">= 6.4.0, < 6.4.15", "ecosystem": "vendor"}, {"name": "fortinet fortimanager", "fixed": ["7.0.13"], "affected": ">= 7.0.0, < 7.0.13", "ecosystem": "vendor"}, {"name": "fortinet fortimanager", "fixed": ["7.2.8"], "affected": ">= 7.2.0, < 7.2.8", "ecosystem": "vendor"}, {"name": "fortinet fortimanager", "fixed": ["7.4.5"], "affected": ">= 7.4.0, < 7.4.5", "ecosystem": "vendor"}, {"name": "fortinet fortimanager", "fixed": [], "affected": "= 7.6.0", "ecosystem": "vendor"}, {"name": "fortinet fortimanager cloud", "fixed": [], "affected": ">= 6.4.1, <= 6.4.7", "ecosystem": "vendor"}, {"name": "fortinet fortimanager cloud", "fixed": ["7.0.13"], "affected": ">= 7.0.1, < 7.0.13", "ecosystem": "vendor"}, {"name": "fortinet fortimanager cloud", "fixed": ["7.2.8"], "affected": ">= 7.2.1, < 7.2.8", "ecosystem": "vendor"}, {"name": "fortinet fortimanager cloud", "fixed": ["7.4.5"], "affected": ">= 7.4.1, < 7.4.5", "ecosystem": "vendor"}, {"name": "Fortinet FortiManager", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "fortimanager", "fortinet", "infrastructure", "self-hosted"]
not_affected_if: ["unknown"]
published_at: "2024-10-23T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47575", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager…

Fortinet FortiManager has a missing authentication flaw in its fgfmd daemon, which handles connections from managed FortiGate devices. A remote unauthenticated attacker can send crafted requests to execute arbitrary code or commands on the FortiManager.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:fortinet fortimanager affected >= 6.2.0, < 6.2.13 fixed 6.2.13
- vendor:fortinet fortimanager affected >= 6.4.0, < 6.4.15 fixed 6.4.15
- vendor:fortinet fortimanager affected >= 7.0.0, < 7.0.13 fixed 7.0.13
- vendor:fortinet fortimanager affected >= 7.2.0, < 7.2.8 fixed 7.2.8
- vendor:fortinet fortimanager affected >= 7.4.0, < 7.4.5 fixed 7.4.5
- vendor:fortinet fortimanager affected = 7.6.0 fixed ?
- vendor:fortinet fortimanager cloud affected >= 6.4.1, <= 6.4.7 fixed ?
- vendor:fortinet fortimanager cloud affected >= 7.0.1, < 7.0.13 fixed 7.0.13
- vendor:fortinet fortimanager cloud affected >= 7.2.1, < 7.2.8 fixed 7.2.8
- vendor:fortinet fortimanager cloud affected >= 7.4.1, < 7.4.5 fixed 7.4.5
- vendor:Fortinet FortiManager affected ? fixed ?

## Fix

Apply the mitigation or fixed firmware per Fortinet's vendor advisory; the sources do not name the fixed version. Discontinue use if no mitigation is available, per CISA.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-47575

## From the sources

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_