FortiManager 7.6.1/7.4.3-5/7.2.5-9 - Alt Path Auth Bypass
CVE-2026-70468 Published on August 12, 2026
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
Vulnerability Analysis
CVE-2026-70468 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Products Associated with CVE-2026-70468
stack.watch emails you whenever new vulnerabilities are published in Fortinet FortiManager or Fortinet Fortimanagercloud. Just hit a watch button to start following.
Affected Versions
Fortinet FortiManager:- Version 7.6.1 is affected.
- Version 7.4.3, <= 7.4.5 is affected.
- Version 7.2.5, <= 7.2.9 is affected.
- Version 7.6.1 is affected.
- Version 7.4.3, <= 7.4.5 is affected.
- Version 7.2.5, <= 7.2.9 is affected.