NCSC-VD-2601-001-03
Severity Level: Critical
Reference No.: NCSC-VD-2601-001-03
Fortinet
Description
CVE-2026-24858: A critical authentication bypass vulnerability in Fortinet FortiCloud SSO allows attackers with a FortiCloud account and a registered device to log into FortiOS, FortiManager, and FortiAnalyzer devices registered to other FortiCloud accounts, when FortiCloud SSO administrative login is enabled.
Vulnerabilities
- CVE-2026-24858
A critical authentication bypass vulnerability in Fortinet FortiCloud SSO allows attackers with a FortiCloud account and a registered device to log into FortiOS, FortiManager, and FortiAnalyzer devices registered to other FortiCloud accounts, when FortiCloud SSO administrative login is enabled.