Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-24858

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

9.8
CVSS 3.1
1
story
JAN 27
added to KEV
Severity
9.8 Critical · vendor score
Vendor
Fortinet
Product
Multiple Products
Published
Jan 27, 2026
Added to KEV
Jan 27, 2026
KEV deadline
Jan 30, 2026
Ransomware use
Unknown
Weakness
CWE-288
Part of FortiCloud SSO Authentication Bypass →

What it is

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesFortinet Warns of Critical Flaw After FortiCloud SSO ExploitationFortinet is rolling out updates for CVE-2026-24858, with fixes for some versions available as of Tuesday, and others in releases that are upcoming at an unspecified date.DECIPHER · 2 MIN

Official references

6 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisoryfortiguard.fortinet.com/psirt/FG-IR-26-060Fixfortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortiosAnalysiscert-portal.siemens.com/productcert/html/ssa-975644.html