← CVE Intelligence

CVE-2026-22572

Fortinet / FortiManager PUBLISHED

Description (CNA)

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.11, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.2 through 7.2.11 may allow an attacker with knowledge of the admins password to bypass multifactor authentication checks via submitting multiple crafted requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiManageraffected 7.6.0 through 7.6.3; affected 7.4.0 through 7.4.7; affected 7.2.2 through 7.2.12
Fortinet / FortiAnalyzeraffected 7.6.0 through 7.6.3; affected 7.4.0 through 7.4.7; affected 7.2.2 through 7.2.12

CWE

CWE-288

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.