Log in Start free

Actively exploited · Published Jan 27, 2026 · Assigned by fortinet

CVE-2026-24858

Critical 9.4 Exploited

In plain English

A critical-severity authentication bypass in FortiAnalyzer from Fortinet. Attackers are actively exploiting it in the wild (listed by CISA on January 27, 2026). The chance it is exploited in the next 30 days is estimated at 86.6% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Severity (CVSS 3.1)9.4Critical
Exploit odds (30 days)86.6%top 0.3% of all CVEs
Exploited in the wildYesCISA KEV since Jan 27, 2026
Attack tooling1Public PoC

CISA guidance

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Jan 30, 2026.

Official description

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Affected products (as reported)

VendorProductVersions
Fortinet FortiWeb 8.0.0 – through 8.0.37.6.0 – through 7.6.67.4.0 – through 7.4.11
Fortinet FortiNAC-F 7.6.3 – through 7.6.5
Fortinet FortiOS 7.6.0 – through 7.6.57.4.0 – through 7.4.107.2.0 – through 7.2.127.0.0 – through 7.0.18
Fortinet FortiAnalyzer 7.6.0 – through 7.6.57.4.0 – through 7.4.97.2.0 – through 7.2.117.0.0 – through 7.0.15
Fortinet FortiProxy 7.6.0 – through 7.6.47.4.0 – through 7.4.127.2.0 – through 7.2.157.0.0 – through 7.0.22
Fortinet FortiManager 7.6.0 – through 7.6.57.4.0 – through 7.4.97.2.0 – through 7.2.117.0.0 – through 7.0.15

Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C

References