DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen
view advisory published 2026-03-10
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen und Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-22629US | — | — | ||
An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all vers… | ||||
| CVE-2026-22572US | —OT elevated | — | ||
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 thro… | ||||
| CVE-2025-68648US | — | — | ||
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAn… | ||||
| CVE-2025-68482US | medium5.9 | — | ||
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0… | ||||
| CVE-2025-48418US | high7.2 | — | ||
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 throu… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-0671 - CSAF Versionself
- WID-SEC-2026-0671 - Portal Versionself
- FortiGuard PSIRT Advisory FG-IR-26-078 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-079 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-081 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-090 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-092 vom 2026-03-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan