Vulnerability Details CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 53.2%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-70468
-
cpe:2.3:a:fortinet:fortimanager:7.2.5
-
cpe:2.3:a:fortinet:fortimanager:7.2.6
-
cpe:2.3:a:fortinet:fortimanager:7.2.7
-
cpe:2.3:a:fortinet:fortimanager:7.2.8
-
cpe:2.3:a:fortinet:fortimanager:7.2.9
-
cpe:2.3:a:fortinet:fortimanager:7.4.3
-
cpe:2.3:a:fortinet:fortimanager:7.4.4
-
cpe:2.3:a:fortinet:fortimanager:7.4.5
-
cpe:2.3:a:fortinet:fortimanager:7.6.1
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.5
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.6
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.7
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.8
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.9
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.3
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.4
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.5
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.6
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.6.1