Description
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiManager | 7.4.0 ≤7.4.11 | — |
| Fortinet | FortiManager | 7.6.0 ≤7.6.7 | — |
| Fortinet | FortiManager | 8.0.0 ≤8.0.1 | — |
| Fortinet | FortiManager | 7.2.0 ≤7.2.13 | — |
Advisories 2
- NCSC-2026-0488 Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026