← العودة للجدول
CVE-2026-24858
CVE-2026-24858 — An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-2
📅 2026-01-27
🔴 Critical 🔥 No NVD Exploit Fortinet CVSS 9.8 🎯 EPSS 4.8%

📋 الوصف الكامل

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.

💻 الأنظمة المتأثرة

Fortinet FortiOS | Fortinet FortiManager | Fortinet

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-24858

📡 المصدر

NVD

✅ الحلول والتخفيف

Fortinet PSIRT Advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←