VDB
CVE-2026-70466
CVE-2026-70466
PUBLISHED
CVSS 4.8 MEDIUM
Reported by fortinet · Published August 12, 2026
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>
Risk Scores
CVSS 3.1
4.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiWeb | 8.0.0, 7.6.0, 7.4.0 |
| Fortinet | FortiOS | 7.6.0, 7.4.0, 7.2.0 |
| Fortinet | FortiWeb | 7.0.0, 8.0.0, 7.6.0 |
| Fortinet | FortiOS | 7.6.0, 7.4.0, 7.2.0 |
Timeline
- Aug 12, 2026 Coalition ESS Score
- Aug 12, 2026 CVE Published
- Aug 13, 2026 Security Advisory
- Aug 20, 2026 Security Advisory
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 CVE Updated