FortiPortal 7.x Improper Auth via /admin
CVE-2026-49938 Published on June 9, 2026
A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here>
Vulnerability Analysis
CVE-2026-49938 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-49938 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-49938
Want to know whenever a new CVE is published for Fortinet Fortiportal? stack.watch will email you.
Affected Versions
Fortinet FortiPortal:- Version 7.4.0, <= 7.4.7 is affected.
- Version 7.2.0, <= 7.2.8 is affected.
- Version 7.0.0, <= 7.0.14 is affected.