Description
A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.6 | — |
Advisories 2
- NCSC-2026-0489 Kwetsbaarheden verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4489 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026