Vulnerability Details CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 51.5%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-70468
-
cpe:2.3:a:fortinet:fortimanager:7.2.5
-
cpe:2.3:a:fortinet:fortimanager:7.2.6
-
cpe:2.3:a:fortinet:fortimanager:7.2.7
-
cpe:2.3:a:fortinet:fortimanager:7.2.8
-
cpe:2.3:a:fortinet:fortimanager:7.2.9
-
cpe:2.3:a:fortinet:fortimanager:7.4.3
-
cpe:2.3:a:fortinet:fortimanager:7.4.4
-
cpe:2.3:a:fortinet:fortimanager:7.4.5
-
cpe:2.3:a:fortinet:fortimanager:7.6.1
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.5
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.6
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.7
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.8
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.2.9
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.3
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.4
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.5
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.4.6
-
cpe:2.3:a:fortinet:fortimanager_cloud:7.6.1