Riskcovery

CVE-2024-26009

State
Published
Severity
7.9 High
Published
Aug 12, 2025
Updated
Apr 20, 2026
Reserved
Feb 14, 2024

Read the record on cve.org

Description

An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.

Scores

CVSSScoreVectorSource
3.17.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:Cfortinet

Weaknesses

  • CWE-288 Execute unauthorized code or commands

Affected Products

ProductVersions
FortiProxyFortinet
  • 7.4.0 through 7.4.2Affected
  • 7.2.0 through 7.2.8Affected
  • 7.0.0 through 7.0.15Affected
FortiOSFortinet
  • 6.4.0 through 6.4.15Affected
  • 6.2.0 through 6.2.16Affected
  • 6.0.0 through 6.0.18Affected
FortiPAMFortinet
  • 1.2.0Affected
  • 1.1.0 through 1.1.2Affected
  • 1.0.0 through 1.0.3Affected
FortiSwitchManagerFortinet
  • 7.2.0 through 7.2.3Affected
  • 7.0.0 through 7.0.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.