NCSC-VD-2601-001-03
مستوى الخطورة: حرجة
الرقم المرجعي: NCSC-VD-2601-001-03
Fortinet
الوصف
CVE-2026-24858: A critical authentication bypass vulnerability in Fortinet FortiCloud SSO allows attackers with a FortiCloud account and a registered device to log into FortiOS, FortiManager, and FortiAnalyzer devices registered to other FortiCloud accounts, when FortiCloud SSO administrative login is enabled.
الثغرات
- CVE-2026-24858
A critical authentication bypass vulnerability in Fortinet FortiCloud SSO allows attackers with a FortiCloud account and a registered device to log into FortiOS, FortiManager, and FortiAnalyzer devices registered to other FortiCloud accounts, when FortiCloud SSO administrative login is enabled.