Live › vulnerability › CVE-2026-24858
Go to dashboardFortinet FortiAnalyzer, FortiManager, FortiOS and FortiProxy have an authentication bypass in FortiCloud SSO that lets an attacker log into devices registered to other FortiCloud accounts. The attacker needs their own FortiCloud account with a registered device, and the flaw is actively exploited in the wild per CISA KEV.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Fortinet Multiple Products | vendor | – | – |
| fortinet fortianalyzer | vendor | >= 7.0.0, <= 7.0.15 | – |
| fortinet fortianalyzer | vendor | >= 7.2.0, <= 7.2.11 | – |
| fortinet fortianalyzer | vendor | >= 7.4.0, < 7.4.10 | 7.4.10 |
| fortinet fortianalyzer | vendor | >= 7.6.0, < 7.6.6 | 7.6.6 |
| fortinet fortimanager |
| vendor |
| >= 7.0.0, <= 7.0.15 |
| – |
| fortinet fortimanager | vendor | >= 7.2.0, <= 7.2.11 | – |
| fortinet fortimanager | vendor | >= 7.4.0, < 7.4.10 | 7.4.10 |
| fortinet fortimanager | vendor | >= 7.6.0, < 7.6.6 | 7.6.6 |
| fortinet fortinac-f | vendor | >= 7.6.3, < 7.6.6 | 7.6.6 |
| fortinet fortiproxy | vendor | >= 7.0.0, <= 7.0.22 | – |
| fortinet fortiproxy | vendor | >= 7.2.0, <= 7.2.15 | – |
| fortinet fortiproxy | vendor | >= 7.4.0, <= 7.4.12 | – |
| fortinet fortiproxy | vendor | >= 7.6.0, <= 7.6.4 | – |
| fortinet fortiweb | vendor | >= 7.4.0, <= 7.4.11 | – |
| fortinet fortiweb | vendor | >= 7.6.0, <= 7.6.6 | – |
| fortinet fortiweb | vendor | >= 8.0.0, <= 8.0.3 | – |
| fortinet fortios | vendor | >= 7.0.0, <= 7.0.18 | – |
| fortinet fortios | vendor | >= 7.2.0, <= 7.2.12 | – |
| fortinet fortios | vendor | >= 7.4.0, < 7.4.11 | 7.4.11 |
| fortinet fortios | vendor | >= 7.6.0, < 7.6.6 | 7.6.6 |
| siemens ruggedcom ape1808 firmware | vendor | – | – |
Check whether FortiCloud SSO authentication is enabled on FortiAnalyzer, FortiManager, FortiOS or FortiProxy devices.
Apply the mitigation from Fortinet's vendor advisory for CVE-2026-24858, or disable FortiCloud SSO authentication if mitigations are unavailable; sources do not name the fixed versions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
This page as .md · .json · in your agent: get_signal("CVE-2026-24858")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.