Dashboard / CVE-2026-70468

CVE-2026-70468

HIGH
MEDIUM Priority: 0.04 BB Relevance: 66/100
Published: 2026-08-12 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
fortinet fortimanager 7.2.5 – 7.2.10
fortinet fortimanager 7.4.3 – 7.4.6
fortinet fortimanager 7.6.1
fortinet fortimanager_cloud 7.2.5 – 7.2.10
fortinet fortimanager_cloud 7.4.3 – 7.4.6
fortinet fortimanager_cloud 7.6.1

References & Advisories (1)

Bug Bounty Relevance

66 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

8.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.46%
Raw Score 0.004590
Percentile 39.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00459
2026-10-28
0.00459

Intelligence Sources

nvd ref →

External Links