← CVE Intelligence

CVE-2026-22575

Fortinet / FortiManager PUBLISHED

Description (CNA)

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiManageraffected 7.6.0 through 7.6.4; affected 7.4.0 through 7.4.10; affected 7.2.0 through 7.2.12; affected 7.0.0 through 7.0.16; affected 6.4.0 through 6.4.15
Fortinet / FortiManager Cloudaffected 7.6.2 through 7.6.4; affected 7.4.1 through 7.4.10; affected 7.2.1 through 7.2.12; affected 7.0.1 through 7.0.16; affected 6.4.1 through 6.4.7

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.