Description
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 8.0.0 ≤8.0.3 | — |
| Fortinet | FortiAuthenticator | 6.6.0 ≤6.6.10 | — |
Advisories 2
- NCSC-2026-0490 Kwetsbaarheden verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026