CVE-2026-70468: fortimanager 7.6.1; +3 more affected products

Affected technology

fortimanager · from 7.2.5 (inclusive), before 7.2.10 (exclusive)
fortinet

fortimanager · from 7.4.3 (inclusive), before 7.4.6 (exclusive)
fortinet

fortimanager · 7.6.1
fortinet

fortimanager cloud · from 7.2.5 (inclusive), before 7.2.10 (exclusive)
fortinet

fortimanager cloud · from 7.4.3 (inclusive), through 7.4.6 (inclusive)
fortinet

fortimanager cloud · 7.6.1
fortinet

FortiManager · 7.6.1, 7.4.3 through 7.4.5, 7.2.5 through 7.2.9
Fortinet

FortiManager Cloud · 7.6.1, 7.4.3 through 7.4.5, 7.2.5 through 7.2.9
Fortinet

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could get past authentication checks. Vendor/CNA’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high.