CVE-2026-24858

CRITICAL CISA KEV EPSS 99.7%

Published Jan 27, 20265mo ago · Modified Jun 17, 20261w ago

9.8 CVSS 3.1

Critical

Find Similar

Published Jan 27, 2026 5mo ago

Last Modified Jun 17, 2026 1w ago

KEV Listed Jan 27, 2026 5mo ago

KEV Due Jan 30, 2026 151d overdue

Description

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

CISA Known Exploited Overdue 151d

Added: Jan 27, 2026
Due: Jan 30, 2026

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS Exploit Probability

99.7% percentile

Exploit & Patch Status

Actively Exploited (KEV)

No Patch Available

Weaknesses 1

CWE-288

Affected Products 22

Vendor	Product	Version	Range
fortinet	fortianalyzer	*	≥7.0.0 – ≤7.0.15
fortinet	fortianalyzer	*	≥7.2.0 – ≤7.2.11
fortinet	fortianalyzer	*	≥7.4.0 – <7.4.10
fortinet	fortianalyzer	*	≥7.6.0 – <7.6.6
fortinet	fortimanager	*	≥7.0.0 – ≤7.0.15
fortinet	fortimanager	*	≥7.2.0 – ≤7.2.11
fortinet	fortimanager	*	≥7.4.0 – <7.4.10
fortinet	fortimanager	*	≥7.6.0 – <7.6.6
fortinet	fortinac-f	*	≥7.6.3 – <7.6.6
fortinet	fortiproxy	*	≥7.0.0 – ≤7.0.22
fortinet	fortiproxy	*	≥7.2.0 – ≤7.2.15
fortinet	fortiproxy	*	≥7.4.0 – ≤7.4.12
fortinet	fortiproxy	*	≥7.6.0 – ≤7.6.4
fortinet	fortiweb	*	≥7.4.0 – ≤7.4.11
fortinet	fortiweb	*	≥7.6.0 – ≤7.6.6
fortinet	fortiweb	*	≥8.0.0 – ≤8.0.3
fortinet	fortios	*	≥7.0.0 – ≤7.0.18
fortinet	fortios	*	≥7.2.0 – ≤7.2.12
fortinet	fortios	*	≥7.4.0 – <7.4.11
fortinet	fortios	*	≥7.6.0 – <7.6.6
siemens	ruggedcom_ape1808_firmware	*	any
siemens	ruggedcom_ape1808	*	any

References 4

cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-975644.html

Third Party Advisory
fortiguard.fortinet.com https://fortiguard.fortinet.com/psirt/FG-IR-26-060

Vendor Advisory
cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858

US Government Resource
fortinet.com https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios

MitigationVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.