CVE-2026-22575

mediumpriority · track · 0EPSS 0.002 · 16 %ileNL

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.24% (16th) EPSS

CVSS 4.9 · medium

Is it mine?

18 products

Check your exposure

Who says so?

1 sources

ncsc_nl

EPSS · scored 2026-10-27

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests.

cvss

Technical severity, 0–10. One row per scoring source.

4.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Nsecondary · psirt@fortinet.comexploitability 1.2 · impact 3.6

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:Csecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-284US

affected products (18)

Products and version ranges known to be affected.

Fortinet FortiAnalyzer≤ vers:unknown/*ncsc_nlNL
Fortinet FortiClientWindows≤ vers:unknown/*ncsc_nlNL
Fortinet FortiManager≤ vers:unknown/*ncsc_nlNL
Fortinet FortiManager Cloud≤ vers:unknown/*ncsc_nlNL
Fortinet FortiMonitor≤ vers:unknown/*ncsc_nlNL
Fortinet FortiMonitor OnSight≤ vers:unknown/*ncsc_nlNL
Fortinet FortiOS≤ vers:unknown/*ncsc_nlNL
Fortinet FortiPAM≤ vers:unknown/*ncsc_nlNL
Fortinet FortiProxy≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSIEM≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSOAR PaaS≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSOAR on-premise≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSandbox≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSandbox Cloud≤ vers:unknown/*ncsc_nlNL
Fortinet FortiSandbox PaaS≤ vers:unknown/*ncsc_nlNL
Fortinet Fortimonitor_Onsight≤ vers:unknown/*ncsc_nlNL
fortinet FortiMonitorOnSight≤ vers:unknown/*ncsc_nlNL
fortinet FortiPAM Chrome Extension≤ vers:unknown/*ncsc_nlNL

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2026-0355Kwetsbaarheden verholpen in Fortinet Forti-productenNL2026-09-09csaf · ncsc_nlNL
Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM en FortiSOAR.

sources

Which sources assert this record, and when.

ncsc_nl NVD CVE.org MITRE

published 2026-09-08modified 2026-09-08

references (1) nvd

External citations — patches, advisories, analysis.

https://fortiguard.fortinet.com/psirt/FG-IR-26-171

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan