Vulnerability Intelligence Report
CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
No Active Exploit Signals
CVSS Base Score
7.3
HIGH
Exploitability:2.3
Impact Score:5.9
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-288 ↗Improper access control
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Fortinet | FortiManager | 7.6.1 (affected), 7.4.3 <= 7.4.5 (affected), 7.2.5 <= 7.2.9 (affected) |
| Fortinet | FortiManager Cloud | 7.6.1 (affected), 7.4.3 <= 7.4.5 (affected), 7.2.5 <= 7.2.9 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Fortinet, Inc. · Vendor · USA |
| Reserved | 2026-08-04T15:01:44 |
| Published | 2026-08-12T12:19:04 |
| Last Updated | 2026-08-13T03:55:29 |
Community Chatter & Buzz