Threat intelligence / Vulnerability
CVE-2026-24858
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
Vulnerability
TypeVulnerability
External ID—
First seen2026-01-27
Last seen2026-01-27
Confidence
—
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
Labels
CISA KEV context
Vendor / productFortinet Multiple Products
Added2026-01-27
Due date2026-01-30
3 recorded
Relationships
2 external