Description
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access. Full impersonation however requires the attacker to obtain pre-required id and data via other means.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 6.6.0 ≤6.6.10 | — |
| Fortinet | FortiAuthenticator | 8.0.0 ≤8.0.3 | — |
Advisories 2
- NCSC-2026-0490 Kwetsbaarheden verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026