CVE-2026-70466 — Fortinet / FortiWeb

Description (CNA)

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiWeb	affected 8.0.0 through 8.0.2; affected 7.6.0 through 7.6.5; affected 7.4.0 through 7.4.13; affected 7.2.0 through 7.2.13; affected 7.0.0 through 7.0.12
Fortinet / FortiOS	affected 7.6.0 through 7.6.7; affected 7.4.0 through 7.4.11; affected 7.2.0 through 7.2.13; affected 7.0.0 through 7.0.19; affected 6.4.0 through 6.4.16

CWE

CWE-184

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-157

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.