Dashboard / CVE-2026-22629

CVE-2026-22629

LOW
INFO Priority: 0.02 BB Relevance: 57/100
Published: 2026-03-10 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Network No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.10, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow an attacker to bypass bruteforce protections via exploitation of race conditions. The latter raises the complexity of practical exploitation.

Weakness Classification (1)

Affected Software (24)

VendorProductVersion
Fortinet FortiAnalyzer 7.6.0
Fortinet FortiAnalyzer 7.4.0
Fortinet FortiAnalyzer 7.2.0
Fortinet FortiAnalyzer 7.0.0
Fortinet FortiAnalyzer 6.4.0
Fortinet FortiAnalyzer Cloud 7.6.2
Fortinet FortiAnalyzer Cloud 7.4.1
Fortinet FortiAnalyzer Cloud 7.2.1
Fortinet FortiAnalyzer Cloud 7.0.1
Fortinet FortiAnalyzer Cloud 6.4.1
Fortinet FortiManager 7.6.0
Fortinet FortiManager 7.4.0
Fortinet FortiManager 7.2.0
Fortinet FortiManager 7.0.0
Fortinet FortiManager 6.4.0
Fortinet FortiManager Cloud 7.6.2
Fortinet FortiManager Cloud 7.4.1
Fortinet FortiManager Cloud 7.2.1
Fortinet FortiManager Cloud 7.0.1
Fortinet FortiManager Cloud 6.4.1
fortinet fortianalyzer 6.4.0 – 7.6.5
fortinet fortianalyzer_cloud 6.4.0 – 7.6.5
fortinet fortimanager 6.4.0 – 7.6.5
fortinet fortimanager_cloud 6.4.0 – 7.6.5

References & Advisories (1)

Bug Bounty Relevance

57 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

3.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.42%
Raw Score 0.004190
Percentile 36.5%
Date 2026-11-10

EPSS Trend

2026-11-10
0.00419
2026-11-09
0.00419
2026-11-08
0.00419
2026-11-07
0.00419
2026-11-06
0.00419

Intelligence Sources

mitre ref →
nvd ref →

External Links