Description
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.4 | — |
Advisories 2
- WID-SEC-2026-0387 Fortinet FortiOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 27, 2026
- NCSC-2026-0061 Kwetsbaarheden verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Feb 11, 2026