Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

🗓️ 27 Jan 2026 00:00:00Reported by CISAType

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy have an authentication bypass via an alternate path when FortiCloud Single Sign On is enabled.

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2026-24858	27 Jan 202619:18	–	attackerkb
BDU FSTEC	The vulnerability of the FortiCloud SSO authentication mechanism affects operating systems based on FortiOS, the Fortinet FortiManager device management software, the FortiAnalyzer event monitoring and analysis software, and the FortiProxy proxy server used for protecting against internet attacks. This vulnerability allows a perpetrator to gain unauthorized access to the device.	28 Jan 202600:00	–	bdu_fstec
Circl	CVE-2026-24858	27 Jan 202620:18	–	circl
CISA	Fortinet Releases Guidance to Address Ongoing Exploitation of Authentication Bypass Vulnerability CVE-2026-24858	28 Jan 202612:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	27 Jan 202612:00	–	cisa
CNNVD	Fortinet’s various products have security vulnerabilities	27 Jan 202600:00	–	cnnvd
CVE	CVE-2026-24858	27 Jan 202619:18	–	cve
Cvelist	CVE-2026-24858	27 Jan 202619:18	–	cvelist
EUVD	EUVD-2026-15989	25 Mar 202621:30	–	euvd
EUVD	EUVD-2026-4712	27 Jan 202619:18	–	euvd

27 Jan 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8

EPSS0.85844

SSVC