CRITICAL: CVE-2026-24858 actively exploited — fortinet fortianalyzer

CVE: CVE-2026-24858

CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: CRITICAL

Status: ✅ Confirmed exploited in the wild (CISA KEV)

Affected

• fortinet fortianalyzer
• fortinet fortimanager
• fortinet fortiproxy
• fortinet fortiweb
• fortinet fortios

Summary

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE
• CISA Known Exploited Vulnerabilities Catalog

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-060
• https://cert-portal.siemens.com/productcert/html/ssa-975644.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858
• https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._