Browse / CVEs / CVE-2026-24858
CVE-2026-24858· fortinet / multiple products· CWE-288
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploited in the wild. Listed by CISA on 2026-01-27; known to be used by ransomware.
86.6%likelihood of exploitation, next 30 days
100%of all CVEs are less likely
Nonecheck to confirm it
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from