Vulnerability · Published Aug 12, 2025 · Assigned by fortinet
CVE-2024-26009
High 7.9
In plain English
A high-severity authentication bypass in FortiOS from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiProxy | 7.4.0 – through 7.4.27.2.0 – through 7.2.87.0.0 – through 7.0.15 |
| Fortinet | FortiOS | 6.4.0 – through 6.4.156.2.0 – through 6.2.166.0.0 – through 6.0.18 |
| Fortinet | FortiPAM | 1.2.01.1.0 – through 1.1.21.0.0 – through 1.0.3 |
| Fortinet | FortiSwitchManager | 7.2.0 – through 7.2.37.0.0 – through 7.0.3 |
Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C