GCVE-110-NCSC-2026-41

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published January 28, 2026

A vulnerability in Fortinet's FortiAnalyzer, FortiManager, and FortiOS allows attackers with FortiCloud accounts to bypass authentication, leading to unauthorized access to registered devices when FortiCloud SSO is enabled.

Download JSON Open in Console

Weaknesses (CWE)

CWE-288Authentication Bypass Using an Alternate Path or Channel

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Fortinet	vers:unknown/*	—	—

Aliases

CVE-2026-24858

References

advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON